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ABSTRACT ... - „ 

Materials in this resource document were compiled for 
use in a Washington seminar directed to the interests of state and 
local government to develop strategies for privacy protection. ( 
Included are the texts of issue papers and supporting documents in 
the following subject areas; (1) criminal justice inform at 2.0 ns (2) 
public employee records; (3) state and local government data banks; 
and (4) consumer privacy interests, also included are discussions of 
the cost of implementing privacy legislation ana strategies for 
intergovernmental cooperation. The appendixes contain a sketch of the 
historical background of privacy protection and a glossary of 
frequently encountered words related to the privacy issue. (If 
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FOREWORD 



Materials in this resource document were com- 
piled for use in a Washingtoo seminar held in 
December* 1974, co-sponsored by the Domestic 
Council Committee on the Right of Privacy and the 
Council of State Governments, The seminar was 
directed to the interests of State and local govern- 
ment and was intended to explore the alternatives 
for intergovernmental strategies In privacy protec- 
tion policy formulation and implenientation* We 
were motivated to join in this seminar because of 
the increasing interest in personal privacy at the 
State and local level, and we desired ,to share 
experience and insights gained by the Federal gov- 
ernment In the developEiient of the Privacy Act of 
1974 (P.U 93-579), signed into law on December 
31 , 1974, That Act pertains mainly to the practices 
of Federal agencies, but its privacy principles re- 
garding information management are of relevance 
to State and local government as well. 

The matter of persona! privacy is one important 
facet of broader questions of information law and 
policy. Our society grows in the need for personal 
information in order to provide the comprehensive 
services that government and the private sector seek 
to make available. The process is not simple, of 
balancing the need for information against die indi- 
vidual's desire to limit tie quantity of inforoiatiGn 
about himself that may become public, but ft is a 
task that must be accomplished to insure die re- 
sponsible management and operation of programs 
that are dependant upon information about people. 

The original seminar materials have been updated 
and expanded in this document and are designed to 
provide an overview of the breadth and depth of 
questions of informational privacy, and to display 
some of the complexities in information regulation 
and management. They explore representative areas 
of information requirements, displaying many of the 
competing interests that must be balanced regarding 
the collection, use and dissemination of personal 
information. It is unwise for any government to 
enter upon the regulation of information processing 
without careful study of the potential impact of 



such regulation on the business practices of govern- 
ment itself, and upon the private sector, 

Relevant portions of these materials will be useful 
to replicate n conference, workshop or seminar, 
such as we held in WasbinglOfi, or to provide a 
foundation for research and inquiry in the develop- 
ment of privet/ orctecdon policy, We make this 
document avairabie in the hope it will help others 
to find a useful entry-point into the matter of per- 
sonal information privacy, though we know it is by 
no means exhaustive or complete* The bibliography 
included suggests other sources for research into 
the many complex issues of information manage- 
ment. From time to time, as the Federal govern- 
ment gains experience in the implementation of the 
Privacy Act, sharing what is learned hopefully can 
make it easier for others to minimize difficulties and 
decrease the costs of program development, 

QUINCY RQDGER5 
Executive Director 

GEORGE B. TRUBOW 
General Counsel 
(Seminar Co-chairman) 

The Domestic Council Committee 
on the Right of Privacy 
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CHAPTER 1 



INTRODUCTION 

Until recently, most Americans probably did not 
consider their right to privacy a significant Issue, 
Many were unconcerned about whether govern- 
mental or private organizations paid any attention 
to personal privacy, and they were confident that 
their own privacy was indeed under proper safe- 
guard. 

Today, while it may not yet have achieved uni- 
versal popularity, privacy appears to be on the way 
to becoming a household concern, Dramatic prog- 
ress in the development of information and record- 
keeping technology, particularly during the last 
decade, has contributed significantly to this relative- 
ly new concern. Information about virtually every 
aspect of an individual's life is now compiled and 
maintained as a matter of course by numerous 
governmental and private agencies. In many cases, 
however, safeguards against privacy invasion have 
lagged behind the mushrooming technological de- 
velopment, (See Appendix I for a brief sketch on 
the historical background of privacy protection and 
Appendix II for a glossary of frequently encoun- 
tered terms, ) 

Individuals within the Federal government, in- 
creasingly aware of these eoncerns s recognized the 
emerging need and took steps to meet it The Presi- 
dent, in February of 1974, established the cabinet- 
level Domestic Council Committee on the Right of 
Privacy to consider and recommend prompt action 
to assure a proper balance between the individual 
right of personal privacy and the necessary prac- 
tices of public and private organizations in accumu- 
lating and managing information about people. At 
the same time, individuals within State and local 
government experienced similar concerns, began 
searching for answers, and formulated legislative 
initiatives within their own governmental systems* 
Knowledge of these activities and developments 
began accumulating, principally in the offices of the 
Council of State Governments, 

This mutuality of concern seemed almost natural- 
ly to spawn the idea of a possible coordinated or at 
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least a cooperative Federal-State-local effort. Thus, 
in the early fall of 1974 the concept of a Privacy 
Seminar evolved, and the Domestic Council Com= 
mittee on the Right of Privacy combined with the 
Council of Stati Governments in joint sponsorship, 
Although time was short, the staff recognized that 
the most favorablfe place and date for the seminar 
would be WashiDgcon, D, G, in mid-December— 
and so agreed despite constraints imposed by thai 
short planning and preparation time, This schedule 
recognized the advantage of introducing various 
privacy concepts to attendees in advance of the 
openings of most S ite legislatures and assemblies. 
It also insured a better attendance than if it had 
been held later* 

Early in the planning it was determined that the 
seminar should provide an opportunity for State 
and local officials to exchange views on approaches 
to providing personal privacy protection at the State 
and local levels of government— an opportunity not 
only to discover what was needed and wanted, but 
also what might work, In a word, the seminar could 
provide a strategy for action. 

Given that overall objective, the staff had the 
tasks of establishing the specific subjects to be 
covered and deciding on the most effective vehicle 
to accomplish ♦hat coverage. After considerable 
exploration and discussion* staff members agreed 
that three separate main sessions would be held, one 
each on criminal justice information systems, State 
and local government data banks, and employee 
records. As a vehicle for stimulating discussion and 
thought in these areas, the staff developed the con- 
cept of a mock legislative hearing, including a chair- 
man and various witnesses, Other discussion sub- 
jects, covered through different approaches, in- 
cluded consumer privacy interests, privacy cost 
implications, and privacy strategy for the future. 
(The final program agenda of the Privacy Seminar 
is Appendix III. ) 



In the selection of attendees, the staff considered 
it important to include not only those acquainted 
with and interested in privacy, but also those in 
professional positions of the type that would pro- 
vide an opportunity for action. The staff also wanted 
to balance representation across the country and 
from various levels of government— State legisla- 
tors, State administrators and local government 
administrators, Response to the invitation was grati- 
fying, with over 150 participants from 37 States and 
the District of Columbia, (A list of attendees is in- 
cluded as Appendix IV,) 

To encourage attendees to prepare for the semi= 
nar, a workbook containing carefully selected ma- 
terials was mailed^ and participants had several days 
to get acquainted with its contents— articles on pri- 
vacy, issue papers, and various samples of model, 
proposed and enacted legislation, (These materials 
are included in this compilation along with addi- 
tional items that will bring the reader up to date and 
round out the basic resource value of the docu= 
ment ) An extensive reading list of significant litera- 
ture on the privacy question was provided each 
participant at the outset of the seminar (see Ap- 
pendix V for an updated version), and a convenient 
resource center was established near the seminar 
meeting rooms, which included works from the 
reading list as well as other materials of interest. 

The following chapters summarize the various 
sessions of the Seminar and its conclusions, Four 
chapters contain transcript summaries of the vari- 
ous sessions and, as appropriate, issue papers and 
sample legislation on the subjects. There are also 
chapters on the luncheon speeches, on systems cost 
and on a strategy for the future. 

Included as appendixes are four background 
articles on privacy, several samples of additional 
State legislation of interest, and the Federal Pri- 
vacy Act of 1974 (because of its high interest 
value) along with a commentary, 
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CHAPTER 2 



CRIMINAL 

JUSTICE 

INFORMATION 

Mot too surprisingly, the mock legislative session 
on criminal justice information attracted the great- 
est Seminar participant interest. 

Chaired by Attorney General Robert Quinn of 
Massachusetts, the committee consisted of State 
Senator William Ray of Alaska, Ms, Helen Lesain of 
the Law Enforcement Assistance Administration, 
and Deputy Attorney General Morris Solomon of 
Pennsylvania, 

The materials mailed out to each pre-registered 
Seminar participant included the following issue 
paper, which has been edited for inclusion here : 
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PAPER 



PRIVACY CONSIDERATIONS FOR 
CRIMINAL JUSTICE INFORMATION 
LEGISLATION 



A* number of issues should be addressed in considering 
any criminal justice information legislation relating to the 
protection of privacy, The following is an attempt to delin- 
eate some of those issues, without suggesting specific reso- 
lution of them, 

SCOPE; The first issue to be addressed is the scope of 
such legislation. What agencies should it cover? What types 
of records? What aspects of the records? 

Agencies: While law enforcement agencies are the pri- 
mary collectors of criminal justice information, they are 
not the sole users of it. The extent to whicn these agencies 
should be covered by legislation dealing with criminal 
justice information is a fundamental issue, particularly 
with respect to the courts because they are a separate and 
equal branch of government. 

Information covered* Legislation dealini with criminal 
justice information could be limited solely to notations ©f 
factual data— rap sheets. It could, however, cover a much 
broader range— intelligence, criminal investigations, prison, 
probation and parole records, and various court records, 
Deciding which records to cover precedes choices of 
methods of regulation, 

Aspects of coverage. No matter which records are cov- 
ered, it will be necessary to determine which aspects will 
be regulated in any legislation. Should regulation hinge on 
the collection of the records or only their use? Should It 
deal with dissemination and exchange outside the agency, 
or should internal use of records be regulated as well? 

INITIAL POLICY DECISIONS: Once it is determined 
which agencies and records should be covered, the policy 
approach of the legislation must be examined. Should the 
legislation prohibit anything not expressly authorized 
therein? Should it set goals to be achieved, leaving the 
implementation to others? Should it prohibit only known 
abuses, leaving all other decisions to the agency? Or what 
combinations of these approaches are feasible, based upon 
the nature of the information, the problems perceived, or 
the agencies covered? 

ADMINISTRATION AND fiOTORCE^ENTi The 
possible courses of action in this area are *nany and inay 
be used in a variety of combinations. Major possibilities 
are listed here but ihz list h not exhaustive, 

Centralized control agency* A single agency could be 
created with the power both to administer and to enforce 
the provisions of any bill. It wculd issue the binding regula- 



tions and interpretations, order agencies to make changes 
and adjudicate individual complaints, 

Agency control. A bill could vest all implementation 
authority in a criminal justice agency with respect to its 
own systems* relying on civil or criminal enforcement in 
individual cases to ensure compliance with the provisions 
of the bill, 

Monitoring system; A bill could give implementation 
authority to each agency in the first instance but establish 
some form of general oversight in an independent body, 
The powers that might be given to a monitoring agency 
range from the review of regulations before they are issued 
to reporting on compliance on an on-going basis, 

Private enforcement. There is a question whether a bill 
that regulates criminal justice information should permit 
private enforcement through individual law suits— either 
injunctive actions, damage actions* or both. If such en* 
forcement is authorized, a number of subsidiary issues 
are raised. Should it be injunctive only, damage suit only, 
or both? Should suit be available against agencies, against 
individuals, or both? Should only actual damages be re- 
coverable or should punitive or exemplary damages be 
authorized in certain cases? What defenses are available? 
May costs and attorneys fees be recovered and* if so, 
should monetary limits be set? Should there be liquidated 
damages— specified amounts— for injuries whose cost is 
difficult to calculate? 

Criminal enforcement* The basic issue is whether non- 
compliance with the provisions of a criminal justice infor- 
mation bill is a proper subject for criminal penalties, If so, 
should the penalties be limited to egregious cases or applied 
to all violations? Is it proper to impose penalties on recip- 
ients and users of information outside the criminal justice 
system as well as on the disseminators who are within the 
system? May the press be subjected to criminal penalties 
for using certain information? What defenses should be 
available with respect to charges of criminal violations of 
a law governing the handling of criminal justice informa- 
tion? 

PREbS ACCESS: One of the most troublesome aspects 
of any criminal justice information bill is its impact on the 
press, If certain information is to be protected from public 
disclosure, then it must not be available to the press. On 
the other hand, the press can serve as a safeguard against 
abuses in the system but only if it has access to informa- 
tion, If certain information, such as rap sheets, consists 
entirely of notations of matters that were originally public 
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information, can the compilation of the information prop- 
erly be denied to the press? Is a distinction feasible be- 
tween current information available to the press and past 
history that is not available? 

INDIVIDUAL ACCESS TO RECORDSs It seems to be 
generally agreed that an individual's access to his own 
records is an important aspect of any privacy legislation. 
With respect to criminal justice records* however, unique 
problems arise. 

Rap Sheet Data, Should an individual have access to his 
own rap sheet? Should access be permitted wherever the 
information may be located or only at certain repositories? 
Who has the responsibility to correct data? What pro- 
cedures should be followed in providing correction? Is it 
preferable to give an individual a copy of his rap sheet or 
to let him inspect it only at some official location? Should 
data be available only to the individual or also to others 
at his request and with his consent? 

Correctional records. Should an individual have full 
access to corrections! records or may they be restricted? 
How should records of other agencies in a correctional 
file— presentence reports* psychiatrist's reports* etc— be 
handled? Rather than blanket access, are ease»by-case 
determinations possible? 

Intelligence and investigative records. Can access be 
permitted without jeopardizing law enforcement interests? 
Is the granting of access consistent with the rules of dis- 
covery in criminal proceedings? If access to active flies is 
denied, can access to closed files be authorized after a 
limited period? If so, what period is reasonable? Can 
proper distinctions be made with respect to access to in- 
vestigative files vs, intelligence files? 

Audit trails. If audit trails are required as to dissemina- 
tion of any of these categories of information, should an 
individual have access to the audit trail? Can distinctions 
properly be made among the various types of information 
regarding access to audit trails? Is there a proper distinc- 
tion between records of criminal justice access and records 
of noncriminal justice access in connection with permitting 
individual access to audit trails? 

SEALING AND EXPUNGEMENT! Among the more 
controversial proposals with respect to criminal justice 
records is the suggestion that some or all of these records 
should be sealed or expunged after a period of time, With 
respect to each category of records the initial decision is 
whether there should be any sealing or expungement at all* 



If there is, which is the preferable form? Expungement, if 
effectively carried out, admits of no exeeptions^ihe record 
ceases to exist. Sealing on the other hand may permit 
exceptions— the seal on any given record can be broken for 
specified reasons, Whichever form is considered— expunge- 
ment or sealing— the questions remain as to which records 
are subject to it, and after what period of time, 

AUTOMATED VS. MANUAL SYSTEMSi Whether 
valid or not, there appears to be more public concern about 
automated criminal justice information systems than about 
manual ones. The question arises- whether greater restric- 
tions should be placed* on the use of automated systems 
than on manual systems and* if so t what restrictions, 
Among the restrictions that have been suggested are total 
prohibitions on patrol car of other mobile terminals, 
requirements of formal agreements governing access to 
automated systems, and requirements that automated 
centralized systems operate on a "pointer system" * rather 
than store information directly, 

NONCRIMINAL JUSTICE ACCESSi While it is gen= 
erally conceded that noncriminal justice access to criminal 
justice information should be regulated, the form of regu- 
lation raises a number of issues, Should only conviction 
information be available or may other rap sheet informa- 
tion be provided? Under what circumstances, if any, should 
investigative or intelligence information be available for 
non-criminal justice purposes? Is it necessary to make 
some correctional information available for noncriminal 
justice purposes in order to secure rehabilitation services? 
What should determine noncriminal justice access to crimi- 
nal justice information: legislation dealing specifically with 
criminal justice information, other legislation, executive 
orders, or agency regulations? Can record-keeping and 
other restrictions, such as nonretention, insure against 
abuse of the information by noncriminal justice agencies? 
Here again, the issues are almost endless, 

ARREST RECORDSi A serious problem concerns 
access to arrest information, i.e., information that notes 
only an arrest and does not indicate any disposition of 
charges. One solution is to prohibit dissemination of an 
arrest record outside the arresting agency, thus denying 
the information to noncriminal justice agencies and to 
other criminal justice agencies as well, A variation is to 



• "Pointer** is frequently Used to characterize an index which merely 
indicates what agency, If any, has a record en an individual, but the 
pointer system does not centrally more the record. 
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permit access to current arrest information but to bar 
access to information concerning arrests for which no dis- 
position is indicated within a reasonable specified time. 
Another approach is narrowly to define the circumstances 
in which criminal justice and noncriminal justice agencies 
may have access to arrest information. Sealing and ex- 
pungement discussed above, are particularly relevant to 
some of these considerations, 

It is suggested that the issues outlined here will provide 
a starting point for any discussions of criminal justice in* 
formation appropriate for enactment or amendment at the 
state level 
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The Seminar materials pertaining to criminal jus- 
tice information systems also included existing stat- 
utes from Alaska, Iowa and Massachusetts, and a 
Model Stat© Act for Criminal Offender Record 
Information produced by Project Search* all of 
which are reprinted below: 



ALASKA STATUTES 

CHAPTER 62. CRIMINAL JUSTICE INFORMATION SYSTEMS 
SECURITY AND PRIVACY 

Section 

10. Regulations 

20. Collection and storage 

30. Access and use 

40, Security, updating, and purging 

50, Interstate systems for the exchange of criminal justice 

information 
60, Civil and criminal remedies 
70, Definiticiis 

Effective date— Section 3, ch, 16I t SLA 1972, provides: 
"This Act takes effect October 1, 1972," 

Sec. 12.62.010. Regulations, (a) The Governor's Cornmis* 
sion on the Administration of 'Justice established under AS 
44, 19.74&— 44,19*758 is authorized* after appropriate con- 
sultation with representatives of state and local law en- 
forcement agencies participating in information systems 
covered by this chapter, to establish rules, regulations, and 
procedures considered necessary to facilitate and regulate 
the exchange of criminal justice information and to insure 
the security and privacy of criminal justice information 
systems. The notice and hearing requirements of the Ad- 
ministrative Procedure Act (AS 44,62), relating to the 
adoption of regulations, apply to regulations adopted un- 
der this chapter, (§ 1 ch 161 SLA 1972) 

Sec. 12,62,020. Collection and storage, (a) The commis- 
sion shall establish regulations concerning the specific 
classes of criminal justice information which may be 
collected and stored in criminal justice information systems. 

(b) No information collected under the provisions of 
any of the following tiUes of the Alaska Statutes, except 
for information related to criminal offenses under those 
titles, may be collected or stored in criminal justice infor- 
mation systems: 

(1) AS 02, except chs. 20, JO and 35; 

(2) AS 03—04; 

(3) AS 05. except chs. 20, 25, 30 and 35; 

(4) AS 06—10; 

(5) AS 13—15; 



(6) AS 17; 

(7) AS IS, except AS 18.60.120—^18.60,175 

(8) AS 19—27; 

(9) AS 29—32; 

(10) AS 34—46; and 

(11) AS 47, except ch, 10. 
(S 1 ch 161 SLA 1972) 

Sec. 12.62,030. Access and use, (a) Except as provided 
in (b) and (c) of this section, access to specified closes &1 
criminal justice information in criminal justice information 
systems is available only to individual law enforcement 
agencies according to the specific needs of the agency- uie - 
der regulations established by the commission under I \0 
of this chapter. Criminal justice information may to userf 
only for law enforcement purposes or for those additional 
lawful purposes necessary to the proper enforceftlerit of 
administration of other provisions of law as the ^Cfrsmis- 
ston may prescribe by regulations established under f \0 
of this chapter. No criminal justice information my bes 
disseminated to an agency before the commission eleter^ 
mines the agency's eligibility to receive that information, 

(b) Criminal justice information may be made available 
to qualified persons for research related to law enforcement* 
under regulations established by the commission^ TTits^ 
regulations must include procedures to assure the security 
of information and the privacy of individuals about wTiorri 
information is released. 

(c) A person shall have the right to inspect crinninal 
justice information which refers to him. If a person believed 
the information to be inaccurate, incomplete or mislead^ 
ing, he may request the criminal justice agency having cus^ 
tody or control of the records to purge, modify or stin*^ 
plement them, If the agency declines to do so, of iff the 
person believes the agency's decision to be otherwise im^ 
satisfactory, the person may in writing request fe^lt^v by 
the commission within 60 days of the decision of the 
agency. The commission, its representative or agent sMt* 
in a case in which it finds a basis for complaint, £ort{jucf 
a hearing at which the person may appear with counsel- 
present evidence, and examine and cross-examine witrietssesu 
Written findings and conclusions shall be issued. If th^ 
record in question is found to be inaccurate, incomplete or* 
misleading, the commission shall order it to be appropriate^ 
ly purged, modified or supplemented by an explanatory 
notation, An agency or person in the state with £Ustcdy* 
possession or control of the record shall promptly liave? 
every copy of the record altered in accordance v^ith the" 
commission's order. Notification of a delation, amend^ 
ment and supplementary notation shall be promptly dis- 
seminated by the commission to persons or agericie^ \C7 
which records in question have been communieatftl, 
well as to the person whose records have been altered , 

(d) An agency holding or receiving criminal justices in- 
formation shall maintain, for a period determined by* thtf 
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commission to be appropriate, a listing of the agencies to 
which It has released or communicated the information, 
These listings shall be reviewed from time to time by the 
commission or staff members of the commission to deter- 
mine whether the provisions of this chapter or any ap- 
plicable regulations have been violated 

(e) Reasonable hours and places of inspection, and any 
additional restrictions, including fingerprinting, that are 
reasonably necessary both to assure the record's security 
and to verify the identities of those who seek to inspect 
them may be prescribed by published rules, Fingerprints 
taken under this subsection may not be transferred to an- 
other agency or used for any other purpose, 

(O A person or agency aggrieved by ait order or de- 
cision of the commission under (c) of this section may 
appeal the order or decision to the superior court, The 
court shall in each case conduct a de novo hearing and 
may order the relief it determines to be necessary, It a 
person about whom information is maintained by an 
agency challenges that information in an action under this 
subsection as being inaccurate, incomplete or misleading, 
the burden is on the agency to prove that the information 
is not inaccurate* incomplete or misleading. (§ 1 ch 161 
SLA 1972) 

Sec, 12.62.040. Security, updating, and purging, (a) 
Criminal justice information systems shall 

(!) be dedicated to law enforcement purposes and be 
under the management and control of law enforcement 
agencies unless exempted under regulations prescribed un- 
der § 10 of this chapter: 

(2) include operating procedures approved by the com» 
mission which are reasonably designed to assure the f 
security of the information contained in the system from 
unauthorized disclosure, and reasonably designed to assure 
that criminal offender record information in the system is 
regularly and accurately revised to include subsequently 
furnished information; 

(3) include operating procedures approved by the com- 
mission which are designed to assure that information con- 
cerning an individual shall be removed from the records, 
based on considerations of age, nature of record, and 
reasonable interval following the last entry of information 
indicating that the individual is still under the jurisdiction 
of a law enforcement agency, 

(b) Notwithstanding any provision of this section, any 
criminal justice information relating to minors which is 
maintained as part of a criminal justice information system 
must be afforded at least the same protection and is sub- 
ject to the same procedural safeguards for the benefit of 
the individual with respect to whom the information is 
maintained, in matters relating to access, use and 1 , security 
as it would be under AS 47.10.090. (§ 1 ch 161 SLA 1972) 

Sec, 12,62.050. Interstate systems for the exchange ©f 
criminal justice information* (a) The commission shall reg- 



ulate the participation by all state and local criminal justice 
agencies in an interstate system for the exchange of 
criminal justice information, and shall be responsible to 
assure the consistency of the participation with the pro- 
visions and purposes of this chapter* The commission may 
not compel any criminal justice agency to participate in an 
interstate system, 

(b) Direct access to an interstate systemi for the ex- 
change of criminal justice information shall be limited to 
those criminal justice agencies that are expressly designated 
for that purpose by the commission. Vfhm the system em- 
ploys telecommunications access terminals, the commission 
shall limit the number and placement of the terminals to 
those for which adequate security measures may be taken 
and as to which commission may impose appropriate super- 
visory regulations. <§ 1 ch 161 SLA 1972) 

Sec, 1 2.62,060. Cavil and criminal remedies, (a) A person 
with respect to whom criminal justice information has been 
wilfully maintained, disseminated, or used in violation of 
this chapter has a civil cause of action against the person 
responsible for the violation and shall be entitled to re- 
cover actual damages and reasonable attorney fees and 
other reasonable litigation costs. 

(b) A person who wilfully disseminates or uses criminal 
justice information knowing such dissemination or use to 
be in violation of this chapter, upon convictioii, is punish- 
able by a fine of not more than $1,000 or by inipriscnment 
for not more than one year, or by both, 

(c) A good faith reliance upon the provisions of this 
chapter or of applicable law governing maintenance, dis- 
semination, or use of criminal justice information, or upon 
rules, regulations, or procedures prescribed under this 
chapter is a complete defense to a civil or criminal action 
brought under this chapter, (I 1 ch 161 SLA 1972) 

Sec, 12.62.070. Definitions, In this chapter 

(1) ''criminal justice information system** means a sys- 
tem, including the equipment, facilities, procedures, agree* 
meats, and organizations related to the system funded in 
whole or in part by the Law Enforcement Assistance Ad- 
ministration, for the collection, processing , or dissemination 
of criminal justice information; 

(2) "criminal justice information* 1 means information 
concerning an individual in a criminal justice information 
system and indexed unde, the individuals name, or re- 
trievable by reference to the individual by name or other- 
wise and which is collected or stored in a criminal justice 
information system; 

(3) "commission" means the Governor's Commission on 
the Administration of Justice established under AS 
44J 9,746— 44.19,758; 

(4) "Interstate systems" means agreements, arrange- 
ments and systems for the interstate transmission and §x- 
change of criminal justice information* but does not in- 
clude record keeping systems in the state maintained or 
controlled by a state or local agency, or ^oup of agencies* 
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even if the agency receives information through, or other* 
wise participates in, systems for the interstate exchange of 
criminal justice information; 

(5) "law enforcement" means any activity relating to 
crime prevention, control or reduction or the enforcement 
of the criminal prevention, control or reduction or die en- 
forcement of the criminal law, including, hut not limited 
to, police efforts to prevent, control or reduce crime or to 
apprehend criminals, activities of criminal prosecution, 
courts, public defender, corrections, probation or parole 
authorities; 

(6) 'law enforcement agency" means a public agency 
which performs as one of its principal functions activities 
pertaining to law enforcement. (§ 1 ch 161 SLA 1972} 



IOWA 

Chapter 294 
Criminal History Data 
S. R 115 

AN ACT relating to disclosure of criminal history and in- 
telligence data and providing penalties. 

Be It Enacted by the General Assembly of the State of 
low a: 

Section 1. New Secttom, DefinJtkms of *vords and 
phrases. As used in this Act, unless the context otherwise 
requires: 

1. ^Department" means the department of public safety. 

2. ^Bureau** means the department of public safety, 
division of criminal investigation and bureau of identifica- 
tion. 

3. "Criminal history data' 4 means any or all of the 
following information maintained by the department or 
bureau in a manual or automated data storage system and 
individually identified: 

a. Arrest data, 
b* Conviction data, 
c, Dispositlert data, 
d; Correctional data, 

4. M Arrest data" means information pertaining to an 
arrest for a public offense and includes the charge, date, 
time, and place. Arrest data includes arrest warrants for 
all public offenses outstanding and not served and includes 
the filing of charges, by preliminary information when 
Aled by a peace officer or law enforcement officer or 
indictment, the date and place of alleged commission and 
county of jurisdiction, 

5. "Conviction data 1 * means information that a person 
was convicted of or entered a plea of guilty to a public 
offense and Includes the date arid location of commission 
and place and court of conviction, 

6. "Disposition data* means information pertaining to a 
recorded court proceeding subsequent and incidental to a 



public offense arrest and includes dismissal of the charge, 
suspension or deferral of sentence, 

7. Correctional data" means information pertaining to 
the status, location and activities of persons under the 
supervision of the county sheriff, the division of corrections 
of the department of social services, board of parole or any 
other state or local agency perfomning the same or similar 
function, but does not include Investigative, sociological, 
psychological, economic or other subjective information 
maintained by the divsion of corrections of the department 
of social services or board of parole, 

8. "Public offense" as used in subsections four' (4), five 
(5), and six (6) of this section does not include eon- 
Indictable offenses under either chapter three hundred 
twenty-one (321) of the Code or local traffic ordinances, 

9. **Individuaiiy identified" meant criminal history data 
which relates to a specific person by one or more of the 
following means of identification: 

a, Names and alias, if any, 
b* Social security number, 

c. Fingerprints* 

d. Other index cross-referenced to paragraphs a, b» or c* 

e. Other individually identifying characteristics, 

10. "Criminal Justice agency*' means any agency or de- 
partment of any level of government which performs as its 
principal function the apprehension, prosecution, adjudica- 
tion, incarceration, or rehabilitation of criminal offenderSi 

11. "Intelligence data" means information collected 
where there are reasonable pounds to suspect involvement 
or participation in criminal activity by any person, 

12. "Surveillance data" means information on in- 
dividuals* partaining to participation in organizations, 
groups, meetings or assemblies, where there are no reason- 
able grounds to suspect involvement of participation in 
criminal activity by any person. 

Sic 2. New SlCnoH* DimmlaittoB of criminal fib* 
tary data. The department and bureau may provide copies 
or communicate information from criminal history data 
only to criminal justice agencies, or such other public 
agencies as are authorized by the confidential records 
council The bureau shall maintain a Hit showing the 
individual or agency to whom the data is disseminated and 
the date of dissemination, 

Authorised agencies and criminal Justice agencies shall 
request and may receive criminal history data only when: 

1 . The data is for official purposes In connection ^ith 
prescribed duties, and 

2. The request for data is based upon name, fingerprints, 
or other individual identifying characteristics, 

The provisions of this section and section three (3) of 
this Act which relate to the requiring of an individually * 
identified request prior to the dissemination or redistf mina* 



* According to en foiled A§t, 
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lion of criminal history data shall not apply to the furnish* 
ing of criminal history data to the federal bureau of 
investigation or to the dissemination or redisseminatlon of 
information that an arrest warrant has bean or will be 
issued, and other relevant information including but not 
limited to, the offense and th§ date and place of alleged 
commission, individually identifying characteristics of the 
person to be arrested* and the court or jurisdiction issuing 
the warrant 

Sec. 3, New Section. Redlsseminatiom A peace offr 
car, criminal justice agency, of state or federal regulatory 
agency shall not redisseminate criminal history data, within 
or without the agency, received from the department or 
bureau, unless: 

1. The data is for official purposes in connection with 
prescribed duties of a criminal justice agency* and 

2, The agency maintains a list of the persons receiving 
the data and the date and purpose of the dissemination, 
and 

3 - The request for data is based upon name, finger* 
prints, or other individual identification characteristics, 

A peace officer, criminal justice agency, or state or 
federal regulatory agency shall not redisseminate intelligence 
data, within or without the agency, received from the de- 
partment or bureau or from any other source, except as 
provided in subsections one (I) and two (2) of this 
section. 

Sec. 4, New Section. Statistics. The department, bu* 
reau, or a criminal justice agency may compile and dis- 
seminate criminal history data in the form of statistical 
reports derived from such information or as the basis of 
further study provided individual identities are not ascer- 
tainable. 

The bureau may with the approval of the commissioner 
of public safety disseminate criminal history data to per- 
sons conducting bona fide research, provided the data is 
not individually identified. 

Sec. 5, New Section, Right of notice, access and chaU 
ienge. Any person ©r his attorney with written authorisa- 
tion and fingerprint identification shall have the right to 
examine criminal history data filed with the bureau that 
refers to the person, The bureau may prescribe reasonable 
hours and places of exam! nation. 

Any person who files with the bureau a written statement 
to the effect that a statement contained in the criminal 
history data that refers to him is nonfactual, or informa- 
tion not authorized by law to be kept, and requests a 
correction or elimination of thai information that refers 
to him shall be notified within twenty days by the bureau, 
in writing* of the bureau*! decision or order regarding the 
correction or elimination* The bureau's decision or order or 
failure to allow examination may be appealed to the dis- 
trict court of Polk county by the person requesting said 
examination, correction or elimination. Immediately upon 



such appeal the court shall order the bureau to file with 
the court a certified copy of the criminal history data and 
in no other situation shall the bureau furnish an individual 
or his attorney with a certified copy, except as provided by 
this Act- 

Upon the request of the appellant, the record and 
evidence in such cases shall be closed to all but die court 
and its officers, and access thereto shall be refused unless 
otherwise ordered by the court. The clerk shall maintain a 
separate docket for such actions, No person, other than the 
appellant shall permit a copy of any of the testimony or 
pleadings or the substance thereof to be made available to 
any person other than a party to the action or his attorney, 
Violation of the provisions of this section shall be a public 
offense, punishable under section seven (7) of this Act. 

Whenever the bureau corrects or eliminates data as 
requested or as ordered by the court, the bureau shall 
advise all agencies or individuals who have received the 
incorrect information to correct their files, Upon applica* 
lion to the district court and service of notice on the 
commiisioner of public safety, any individual may request 
and obtain a list of all persons and agencies who received 
criminal history data referring to him, unless good cause 
be shown why the individual should not receive said list, 

Spe, 6, New Section, CivO remedy, Any person may 
institute a civil action for damages under chapters twenty- 
five A (25A) or six hundred thirteen A (613A) of the 
Code ©r to restrain the dissemination of his criminal 
history data or intelligence data in violation of this Act, 
and any person, agency or governmental body proven to 
have disseminated or to have requested and received 
criminal history data or intelligence data in violation of 
this Act shall be liable for actual damages and exemplary 
damages for each violation and shall be liable for court 
costs* expenses and reasonable attorneys' fees Incurred by 
the party bringing the action, In no case shall the award 
for damages be less than one hundred dollars. 
Sec, 7, New Section, Criminal penaltkt* 
1, Any person who willfully requests, obtains, or seeks 
to obtain criminal history data under false pretences, or 
who willfully communicates or seeks to communicate 
criminal history data to any agency or person except in 
accordance with this Act, or any person connected with any 
research program authorized pursuant to this Act who 
willfully falsities criminal history data or any records 
relating thereto, snail, upon conviction, for each sueh 
offense be punished by a fine of not noire than one 
thousand dollars or by imprisonment in the state peniten- 
tiary for not more than two years, or by both fine and 
imprisonment. Any person who knowingly, but without 
criminal purposes, communicates or seeks to communicate 
criminal history data except in accordance) with this Act 
shall for each such offense be fined not wore than one 
hundred dollars or be imprisoned not more than tern days, 
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2 a Any person who willfully requests, obtains, or seeks 
to obtain intelligence data under false pretenses, or who 
willfully communicates or seeks to communicate intelli- 
gence data to any agency or person except in accordance 
with this Act, shall for each such offense hm punished by 
a fine of not more than five thousand dollars or by im- 
prisonment in the state penitentiary for not mere than 
three years, or by bath fine and imprisonment Any person 
who knowingly, hut without criminal purposes, communi* 
eates or seeks to communicate intelligence data except in 
accordance with this Act shall for each such offense be 
fined not more than five hundred dollars or be imprisoned 
not more thin six months, or both. 

3, If the person convicted under this section is a peace 
officer* the conviction shall be grounds for discharge or 
suspension from duty without pay and if the person con- 
victed is a public official or public employee, the conviction 
shall be grounds for removal from office. 

4, Any reasonable grounds for belief that a public 
employee has violated any provision of this Act shall be 
grounds for Immediate removal from ail access to crimi- 
nal history data and intelligence data. 

Sic, 8, Hew Sectioh, Intelligence data* Intelligence 
data contained in the flies of the department of pubic 
safety or a criminal justice agency shall riot be placed 
within a computer data storage system* 

Intelligence data In the flies of the department may be 
disseminated only to a peace officer, criminal justice 
agency, or state or federal regulatory agency, and only if 
the department is satisfied that the need to know and the 
intended use are reasonable, Whenever intelligence data 
relating to a defendant for the purpose of sentencing has 
been provided a court, the court shall inform die de- 
fendant or hjs attorney that it is in possession of such data 
and shall, upon request of the defendant or his attorney, 
permit examination of such data. 

If the defendant disputes the accuracy of the intelligence 
data, he shall do so by filing an affidavit stating the sub- 
stance of the disputed data and wherein it Is inaccurate, 
If the court finds reasonable doubt as to the accuracy of 
such information, it may require a hearing and the 
examination of witnesses relating thereto on or before the 
time set for sentencing. 

Sec. 9, New Section, Ho surveillance data shall be 
placed in files or manual or automated data storage 
systems by the department or bureau or by any peace 
officer or criminal justice agency. Violation of the pro- 
visions of this section shall be a public offense punishable 
under section seven (7) of this Act, 

Sec. 10. Hew Section. Rules* The department shall 
adopt rules and regulations designed to assure the security 
and confidentiality of all criminal history data and in- 
telligence data systems, 

Sic, 1 1, Hew Section, Education program* The de- 



partment shall require an educational program for its 
employees and the employees of criminal justice agencies 
on the proper use and control of criminal history data and 
intelligence data, 

Sec, 12, New Section, Daw processing. Nothing in 
this Act shall preclude the use of the equipment and hard- 
ware of the data processing service center provided for in 
section nineteen B point three (19B.3), subsection five (5), 
of the Code for. the storage and retrieval of criminal 
history data. Piles shall be stored on the computer in such 
a manner as the flies cannot be modified, destroyed, 
accessed, changed or overlayed * in any fashion by non* 
criminal justice agency terminals or personnel. That portion 
of any computer, electronic switch or manual terminal 
having access to criminal history data stored in the state 
computer must be under the management control of a 
criminal justice agency, 

SEC 13. New Section. Review* The department shall 
initiate periodic review procedures designed to determine 
compliance with the provisions of this Act within the 
department and by criminal justice agencies and to de- 
termine that data furnished to them is factual and accurate. 

Sec, 14 Hew Section, System for the exchange of 
criminal history data, The department shall regulate the 
participation by all state and local agencies in any system 
for the exchange of criminal history data, and shall be 
responsible for assuring the consistency of such participa- 
tion with terms and purposes of this Act 

Direct access to such systems shall be limited to such 
criminal justice agencies as are espessly designated for that 
purpose by the department. Use department shall, with re- 
spect to telecommunications terminals employed in the 
discrimination of criminal history data, insure that security 
is provided over an entire terminal or that portion actually 
authorised access to criminal history data. 

Sec, 15, Hiw Section, Report* to department When 
it comes to the attention of a sheriff, police department, or 
other law enforcement agency that a public offense has 
been committed In its jurisdiction, it shall be the duty of 
the law enforcement agency to report information con- 
cerning such crimes to the bureau on a form to be 
furnished by the bureau not more than thirty-five days 
from the time the crime first comes to the attention of such 
law enforcement agency. These reports shall be used to 
generate crime statistics. Trie bureau shall submit statistics 
to the governor, legislature and crime commission on a 
quarterly and yearly basis, 

WTien a sheriff, police depar talent or other law enforce- 
ment agency makes an arrest which is reported to the 
bureau, the arresting law enforcement agency and any 
other law enforcement agency which obtains custody of the 
arrested person shall furnish a disposition report to the 
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bureau whenever the arrested person is transferred to the 
custody of another law enforcement agency or is released 
without paving a complaint or information filed with any 
court 

Whenever a criminal complaint or information is Med in 
any eovirt the clerk shall furnish a disposition report of 
such C£!*c t 

The disposition report, whether by a law enforcement 
agency or court, shall be sent to the bureau within thirty 
days after disposition on a form provided by the bureau, 

Sec. 16, New SienoN, Review and removal. At least 
every year the bureau shall review and determine current 
status of all Iowa arrests reported after the effective date 
of this Act which are at least one year old with no 
disposition data. Any Iowa arrest recorded within a com- 
puter data storage system which has no disposition data 
after five years shall be removed unless there is an out- 
standing arrest warrant or detainer on such charge. 

Sic, IX New Section, Eiclosion, Criminal history 
data In a computer data storage system does not include: 

1. Arrest or disposition data after the person has been 
acquitted or the charges dismissed, 

Sec, 18, New Section, Public records, Nothing In this 
Act shall prohibit the public from examining and copying 
the public records of any public body or agency as au= 
thqrized by chapter sixty-eight A (68A) of the Code, 

Criminal history data and intelligence data in the pos= 
session of the department or bureau, or disseminated by the 
department or bureau, are not public records within the 
provisions of chapter sixty-eight A (68A) of the Code, 

Sec, 19. New Section, There is hereby created a con- 
fidential records council consisting of nine regular mem> 
bers. Two members shall be appointed from the house of 
representatives by the speaker of the house, no more than 
one of whom shall be from the same party. Two mem- 
ber? shall be appointed from the senate by the lieutenant 
governor, no more than one of whom shall be from the 
same party. The other members of the council shall bet 
a judge of the district court appointed by the chief justice 
of the supreme court, one local law enforcement official, 
appointed by the governor; the commissioner of putlic 
safety or his designee; and two private citizens not con- 
nected with law enforcement, appointed by the governor. 
The council shall select Its own chairman, The members 
shall serve at the pleasure of those by whom their ap- 
pointments are made. 

The council shall meet at least annually and at any other 
time upon the call of the governor, the chairman of the, 
council, or any three of its members. Each council mem- 
ber shall be entitled to reimbursement for actual and 
necessary expenses incurred in the performance of official 
duties from funds appropriated to the department of 
public safety. 



The council shall have the following responsibilities and 

duties: 

1, Shall periodically monitor the operation of govern- 
mental information systems which deal with the collection, 
storage, use and dissemination of criminal history or in- 
telligence data, 

2, Shall review the implementation and effectiveness of 
legislation and administrative rules and regulations con- 
cerning such systems, 

3, May recommend changes In said rules and regulations 
and legislation tp the legislature and the appropriate ad- 
ministrative officials, 

4, May require such reports from state agencies as may 
be necessary to perform iti duties, 

5, May r ,ve and review complaints from the public 
concerning the operation of such systems, 

6, May conduct such inquiries and investigations as it 
finds appropriate to achieve) the purposes of this Act, Each 
criminal justice agency in this state and each state and 
local agency otherwise authorized access to criminal history 
data Is authorized and directed to furnish to the council, 
upon its request, such statistical data, reports, and other 
information in its possession as the council deems neces- 
sary to carry out Its functions under this Act, However, 
the council and its members, In such capacity, shall not have 
access to criminal history data or intelligence data unless it is 
data from wnicr» individual identities are not ascertainable or 
data which has been marked so that individual identities 
are not ascertainable, However, the council may examine 
data from which the identity of an individual is ascertain- 
able if requested in writing by that individual or his at* 
torney with written authorization and fingerprint identinea- 
lion, 

7, Shall annually approve rules and regulations adopted 
in accordance with section ten (10) of this Act and rules 
and regulations to assure the accuracy, completeness and 
proper purging of criminal history data, 

8. Shall approve alt agreements, arrangements and sys- 
tems for die interstate transmission and exchange of 
criminal history data. 

Sec. 20, New Section, The provisions of sections two 
(2) and three (3) of this Act shall not apply to the 
certifying of an individual's operating record pursuant to 
section three hundred twe«ty*©ne A point three (321 A.3) 
of the Code. 

Approved July 21, 1973 * 



COMMONWEALTH OF MASSACHUSETTS 

G.L, e, 6, s. 167-178, added by St 1972, c, 805 including 
amendment in St, 1973, St, 961 



* This Aei was passed by the O. A. before Jhtfy t, 1973, 
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Criminal Offender Recopd Information System 
[Not] 

§ 16% Definition* 

The following words shall, whenever used in this section 
or in sections one hu mired and sixty *eight to one hundred 
seventy-eight, inclusive,, have the following meanings un- 
less the context otheirwlste requires: "Criminal justice 
agencies" those a^neies at all levels of government which 
perform as their principal function* activities relating to (a) 
crime prevention, Including research or the sponsorship of 
research; (b) the apprehension, prosecution, adjudication, 
incarceration, or rehabilitation of criminal offenders; or 
(c) the collection, storage, dissemination or usage of 
criminal offender record information. 

"Criminal offender record information"* records and 
data cornpaled by criminal justice agencies for purposes of 
identifying criminal offenders and of maintaining as to each 
such offender a summary of arrests, pretrial proceedinp, 
the nature and disposition of criminal charges, sentencing, 
incarceration, rehabilitation and release, Such information 
shall be restricted to that recorded as the result of the 
initiation of criminal proceedinp or of any consequent 
proceedinp related thereto, It shall not include Intelligence, 
analytical and investigative reports and files, nor statistical 
records and reports in which individuals axe not identified 
and from which their identities are not ascertainable, 

"Interstate systems*', all agreements; arrangements and 
systems for the interstate transmission and exchange of 
criminal offender record information. Such systems shall 
not include recordkeeping systems in the commonwealth 
maintained or controlled by any state or local agency, or 
group of such agencies, even if such agencies receive or 
have received Information througbj or otherwise partiei* 
pa ted or have participated in, systems for the interstate 
exchange of criminal record information. 

"Purge", remove from the criminal offender record in- 
formation system such that there is no trace of information 
removed and no indication that said information was re- 
moved. 

Added by St, 1972, e. 805, § 1. 

Itn E«*cfmcat. Si. 1972, c 805, § l, adding this seetioa and ie& 
tfoas 168 to 178 of this chapter, «as approved July 1£, 1971 Station 
9 provided: *11iii act shall take effeet conformably to law, except 
that any agency, dcp&rtmcnf, institution, or Individual which is 
authorised by statute to receive criminal offender record information 
or Which receives the same at the discretion of the commissioner of 
probation, on the effective date of tills act, shall continue to receive 
the same, notwithstanding any provision of this get to the contrary, 
until January first, nineteen hundred end seventy-three." 

Om Memee s 
Correctional initiations. 
Identification of prisoners, see & 127, I 23, 
Fugitives from Justice, descriptions, see c, 127, f 25, 
Department of public safety, criminal information bureau, see 
c. 22, | 3A. 



Fingerprinting arid photographings 
Cities and towni* persons arrested during clots, etc, see c, 41, 

Persons charged with a felony, lee c. 263, § 1 A, 
Use of systems operated by the board authorized. 

Conuniffioner of probation, see c, 276, f ICO. 

Correctional institutions, set c. 127* §§ 2, 28, 39, 
Department of public safety , iee> c. 147, | 4A. 
State police, criminal information bureau, see e. 147, § 4C 

J ll§8. Criminal history systems board; establishment; 
members; chairuiaoj terms; meetings; expenses; 
regulstforyi powers and duties; director of tile* 
processing and otfttr employtef f report 

There shall be a criminal history systems board, herein- 
after called the board* consisting of the following persons: 
the attorney general, the chairman of the Massachusetts 
defenders committee, the chairman of the parole board, 
the chief justice of the district courts, the chief justice of 
the superior court, the chief justice of the supreme judicial 
court, the commissioner of the department of Correction, 
the commissioner of the department of public safety, the 
commissioner of the department of youth services! the 
commissioner of probation, the executive director of the 
governor's public safety committee, and the police com- 
missioner of the city of Boston, or their designees, all of 
whom shall serve ex officiOi and three other persons to be 
appointed by the governor for a term of three years one 
of whom shall represent tfie Massachusetts district at- 
torneys association, one of whom shall represent the Mas* 
sacusetts chiefs of police association, and one of whom 
shall represent the county commissioners and sheriffs as- 
sociation. Upon the expiration of the term of any ap- 
pointive member his successor shall be appointed in a like 
manner for at term of three years. 

The governor shall designate annually the chairman of 
the board from among its members. No chairman may be 
appointed to serve more than two consecutive terms. The 
chairman shall hold regular meetings, one of which shall 
be an annual meeting and sball notify all hoard members 
of the time and place of all meetings, Special meetings may 
be called at any time by a majority of the board members 
arid shall be called by the chairman upon written ap- 
plication of eight or more members. Kf embers of the board 
shaft receive no compensation, but shall receive their ex* 
pen set actually and necessarily incurred in the discharge of 
their duties. 

The board, after receiving the advice and recommenda- 
tions of its advisory committee, shall, 'with the approval 
of two-thirds of the board members or their designees 
present and voting, promulgate regulations regarding the 
collection, storage, dissemination and mage of criminal 
offender record information, 

Tile board shall provide for and exercise control over 
the installation, operation and maintenance of data pro- 
cessing and data communication systems* hereinafter 
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called the criminal offender record information system 
SaJd system shall be designed to Insure the prompt col* 
lection, exchange, dissemination and distribution of such 
criminal offender record information as may be necessary 
for the efficient administration and operation of criminal 
juf tiee agencies, and to connect such systems directly or in- 
directly with similar systems in tW§ or other states. The 
board shell appoint, subject to section one hundred and 
sixty-nuie, and fix the salary of a director of teleprocessing 
who shall not be subject t© the provisions of chapter thirty, 
one or of section nine A of chapter thirty, The board may 
appoint such other employees, including averts and con- 
sultants, as it deems necessary to carry out its responsi- 
bilities, none of whom shall be subject to the provisions 
of chapter thirty-one or of section nine A of chapter 
thirty. 

The board shall make an annual report to the governor 
and file a copy thereof with the state secretary, the clerk 
of the house of representatives and the clerk of die senate. 

The board is authorised to enter into contracts and 
agreements with, and accept gifts, grants, contributions, 
and bequests of funds from, any department, agency, or 
subdivision of federal, state, county, or municipal govern- 
ment wd any individual, foundation, corporation as- 
sociation, or public authority for the purpose of providing 
or receiving services, facilities, or staff assistance in con- 
nection with its work. Such funds shall be deposited with 
the state treasurer and may be expended by the board in 
accordance with the conditions of the gift, grant, contri- 
bution, or bequest, Without specific appropriation. 

Policies, rules and regulations shall not be adopted by 
the board until a hearing has been held in the manner 
provided by section two of chapter thirty A. 
Added by St. 1972, c. 805 § L Amended by SM973, c. 961, 

i i. 

lftt Amendment St.1973, ^ 961. § I. approved Oct 29 f 1973 
added the list paragraph, 

5 169, Criminal history gystein advisory committee; 
etfabltyiEiitiitf members; vote^ chairman; emotive 
secretary, it »L; meetings; powers, duties and 
functions; participation In baiersfite system for 
exchange of record Information; rtporti 
There shall be a criminal history sptem advisory com- 
mittee of the board, hereinafter called the advisory eorm 
mittee, consisting of the following persons and their de- 
signees: the commissioner of the Boston police depart* 
tnent* the attorney general, the commissioner of correction, 
the coninnissbiier of public safety, the commissioner of" 
youth services, the director of teleprocessing of the eriml* 
nal offender record system, the executive director of the 
governor's public safety committee, the president of the 
Massachusetts district attorneys association, the commis* 
sioner of probation, the chairman of the parole board, and 
the chief justices of the district and superior courts. Each 



agency represented shall be limited to one vote regardless 
of the number of designees present at the time any votes 
are taken. 

The advisory committee shall elect its own chairman 
from its membership to serve a term ©f one year. No 
chairman may be elected to serve more than two con- 
secutive terms, The advisory committee nuiy appoint an 
executive secretary, legal counsel and mzb other em- 
ployees as it may from time to time deem appropriate to 
serve, provided, however, that such employees shall not fee 
subject to chapter thirty-ong or section nine A of chapter 
thirty. 

The chairman shall hold regular meetings, one of which 
shall be an annual meeting and shall notify all advisory 
committee members of the time and place of all meetings. 
Special meetings shall be called at any time by a majority 
ot the advisory committee members, and shall be called by 
the chairman upon written application of seven or more 
members, 

The advisory committee shall recommend to the hoard 
regulations relating to the collection, storage, dissemination 
and use of criminal offender record information. The ad- 
visory committee shall ensure that communication is 
maintained among the several prime users, The advisory 
committee shall also recommend to the board the director 
of teleprocessing of the criminal offender record informa- 
tion system. 

The advisory committee may coordinate Its activities 
with those of any interstate systems for the exchanie of 
criminal offender record information, may nominate one 
or more of its members to serve upon the council or 
committee of any such system and may participate when 
and as it deems appropriate in any such system's activities 
and programs* 

The advisory committee may conduct such Inquiries and 
investigations as It deems necessary and eoniistent with 
its authority, It may request any agency that maintains, 
receives, of that is eligible to maintain or receive criminal 
offender records to produce for inspection statistical data, 
reports and other information concerning tfie collection! 
storage, dissemination and usage of criminal offender 
record information. Each such agency is authorized and 
directed to provide such data, reports, and other informa- 
tion. 

The advisory committee, shall report annually to the 
board concerning the collection, storage, dissemination and 
usage of crimiinal offender record infcmation in the 
commonwealth. The board may require additional reports 
as it deems advisable. 

Policies, rules and regulation! shall not be adopted by 
the advisory committee until a hearing has been held in 
the manner provided by section two of chapter thirty A 
Added by St 1972, c. 805. § L Amended by SL 1973, e, 961 

§ 2. * 
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1973 Amendment. St. 1973, c, 961, § 2, approved Oct. 29, 1973 
added the last paragraph. 

§ 170* Security and privacy council; establishment; mem- 
bers; chairman; terms; clerical assistance; meet- 
ings: duties and functions; expenses; reports; 
participation in interstate system for exchange of 
record information 

There shall be a security and privacy council, herein- 
after called the council, consisting of the chairman and one 
other member of the advisory committee, chosen by the 
advisory committee, and seven other members to be ap- 
pointed by the governor, to include representatives of the 
general public, state and local government, and one re- 
presentative of t'w criminal justice community. Of the 
seven members initially appointed by the governor! two 
shall be appointed for a period of one year, two shall be 
appointed for a period of two years, two shall be ap- 
pointed for a period of three years, one shall be appointed 
for a period of four years, Thereafter, each of the ap- 
pointments shall be for a period of four years. Each 
member appointed by the governor shall serve until his 
successor is appointed and has qualified. The chairman of 
the council shall be elected by and from within the 
council to serve for a term of two years. The advisory 
committee shall provide such clerical and other assistance 
as the council may require. The council shall meet at the 
call of the governor, its chairman, or any three of its mem- 
bers and shall conduct a continuing study and review and 
to make recommendations concerning questions of in- 
dividual privacy and system security in connection with 
the collection, storage, dissemination, and usage of criminal 
offender record information, Council members shall receive 
no compensation for their services on the council but shall 
receive their expenses necessarily incurred in the perfor- 
mance of official duties, 

The council may conduct such inquiries and investiga- 
tions as it deems necessary and consistent with its autho- 
rity. The board, each criminal justice agency in the com- 
monwealth, and each state and local agency having author- 
ized access to criminal offender record information, is 
authorized and may furnish to the council, upon request 
made by its chairman, such statistical data, reports, and 
other information directly related to criminal offender 
record information as is necessary to carry out the council's 
functions, 

The council shall make an annual report to the governor 
and file a copy thereof with the state secretary and the 
clerk of the house of representatives and the clerk of the 
senate. It may make such additional reports and recom- 
mendations as it deems appropriate to carry out its duties. 

The council shall appoint one or more of its members 
to serve upon any similar council or committee connected 
with any interstate system for the exchange of criminal 



offender record information, and may participate as it 
deems appropriate in the activities of any such system. 

Policies, rules arid regulations shall not be adopted by 
the council until a hearing has been held in the manner 
provided by section two of chapter thirty A, 
Added by St. 1972, c. 80S. I 1, Amended by St.1973, c, 
961, § 3, 

1973 Amendment* Stl973 t c. 9*t 1 5, approved Oct. 29, 1973, 
added the last paragraph. 

§ 171* Regulations generally, fe^taulng educational pro* 
gram 

The board shall promulgate regulations (a) creating a 
continuing program] of data auditing and verification to as- 
sure the accuracy and completeness of criminal offender 
record information; (b) assuring the prompt and complete 
purging of criminal record information, insofar as such 
purging is required! by any statute or administrative regu- 
lation, by the order of any court of competent jurisdiction, 
or to correct any errors shown to exist in such information; 
and (c) assuring the security of criminal offender record 
information from unauthorized disclosures at all levels of 
operation. 

The board shall cause to be Initiated for employees of 
all agencies that maintain, receive, or are eligible to main- 
tain or receive criminal offender record information a eon* 
tinulng educational program in the proper use and control 
of such information, 
Added by St. 1972, c, 805, § 1, 

§ 172. Dissemination of record information to authorized 
agencies and Individuate; determination of eligtbU- 
ty for access; certification; listing; scope of In- 
quiry; regulations; access limited; authorization 

Criminal offender record information shall be dissemi- 
nated, whether directly or through any intermediary, only 
to (a) criminal justice agencies and (b) such other in- 
dividuals and agendas as are authorised access to such 
records by statute, 

The board shall certify which agencies and individuals 
requesting access to criminal offender record information 
are authorized such access, The board shall, regarding 
such agency or individual, make a finding in writing of 
eligibility or non-eligibility for such access. No such in- 
formation shall ba disseminated to any agency or in- 
dividual prior to the board's determination of eligibility or, 
in cases in which the board's decision is appealed, prior 
to the final judgment of a court of competent jurisdiction 
that the agency or individual is so eligible. 

Each agency holding or receiving criminal offender 
record information shall maintain, for such period as is 
found by the board to be appropriate, a listing of the 
agencies or individuals to which it has released or com- 
• 

15 



20 



ILLUSTRATIVE 
LEGISLATION 



municated such information. Such listings, or reasonable 
samples thereof, may from time to time be reviewed by 
the board, advisory committee, or council to determine 
whether any statutory provisions or regulations Uave been 
violated, 

Dissemination from any agency in this commonwealth 
of criminal offender record information shall, except for 
purposes ©f research programs approved under section one 
hundred and seventy-three, be permitted only if the in- 
quiry is based upon name, fingerprints or other personal 
identifying characteristics. The board shall promulgate re- 
gulations to prevent dissemination of such information, 
except in the above situations, where inquiries are based 
upon categories of offense or data elements other than 
said characteristics. 

Notwithstanding the provisions of this section, access to 
criminal offender record information on the basis of data 
elements other than personal identifying characteristics 
shall be permissible if the criminal justice agency seeking 
such access has first obtained authorization from the com* 
missioner of probation, or in his absence, a deputy com* 
missioner of probation. Such authorization may be given 
as a matter of discretion in cases in which it has been 
shown that such access is imperative for purposes of the 
criminal justice agency's investigational or other responsibili- 
ties and the information sought to be obtained is not 
reasonably available from any other source or through any 
other method. 

Added by St, 1972. c, 80S, § 1. 

§ 173* Regulations for program research; monitoring; 
access restricted 

The board shall promulgate regulations to govern the 
use of criminal offender record information for purposes 
of program research. Such regulations shall require pre^ 
servation of the anonymity of the individuals to whom ouch 
information relates, shall require the completion of non- 
disclosure agreements by all participants in such programs, 
and shall impose such additional requirements and con- 
ditions as the board finds to be necessary to assure the 
protection of privacy and security interests, 

The board may monitor any such programs to assure 
their effectiveness. The board may, if it determines that a 
program's continuance threatens privacy or security in- 
terests, prohibit access on behalf of any such program to 
criminal offender record information. 
Added by St. 1972, c. 80S, § 1. 

§ 174 Interstate system for exchange of record informa- 
tion; supervision of participation by state and 
local agencies; access limited; telecommunication* 
access terminals 

The board shall supervise the participation by all state 
and local agencies in any interstate systems for the ex* 
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change of criminal offender record information, and shall 
be responsible to assure the consistency of such participa- 
tion with the terms and purposes of sections one hundred 
and sixty^eight to section one hundred and seventy-eight, 
inclusive. 

Direct access to any such system shall be limited to 
such criminal justice agencies as are expressly designated 
for that purpose by the board. Where any such system 
employs telecommunications access terminals, the board 
shall limit the number and placement of such terminals to 
those for which adequate security measures may be taken 
and as to which the board may impose appropriate super- 
visory regulations, 
Added by St. 1972, c. 80S, § J. 

I 170* Inspection of record information by individual 
concerned; gorrectionsi procedure; restrictions 

Each individual shall have the right to inspect, and if 
practicable, copy, criminal offender record information 
which refers to him, If an individual believes such infor- 
mation to be inaccurate or incomplete* he shall request 
the agency having custody or control of the records to 
purge, modify or supplement them, If the agency declines 
to so act, or if the individual believes the agency's decision 
to be otherwise unsatisfactory, the individual may in writ- 
ing request review by the council The council shall, in' 
each case in which it finds prima facie basis for complaint, 
conduct a hearing at which the individual may appear 
with counsel, present evidence, and examine and cross* 
examine witnesses, Written findings shall be issued within 
sixty days of receipt by the council of the request for 
review, Failure to issue findings shall be deemed a decision 
of the council, If the record in question is found to be 
inaccurate, incomplete or misleading, the council shall 
recommend to the board that the record be appropriately 
purged, modified or supplemented by explanatory flotation. 
Notification of the council's recommendation and sub 
sequent orders by the board to delete, amend or supple- 
ment the records, shall be disseminated by the board to 
any individuals or agencies to which the records in question 
have been communicated, as well as to the individual 
whose records have been ordered so altered within ten 
days of receipt of the council's recommendation. Failure 
of the board to act shall be deemed a decision of the 
board, 

Agencies at which criminal offender records are sought 
to be inspected shall prescribe reasonable hours and places 
of inspection, and shall impose such additional restrictions 
as may be approved by the board. Including fingerprinting, 
as are reasonably necessary both to assure the record's 
security and to verify the identities of those who leek to 
inspect them, 

Added by SU972, c, 805, § I. 
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§ 176, Appeal; de novo heirfngf equitable relief 

Any individual or agency aggrieved by any order or 
decision of the board or adverse recommendation of the 
council or failure of the council to issue findings may ap- 
peal such order, recommendation or decision to the supe- 
rior court in the county in which he is resident or in which 
the board issued the order or decision from which the in- 
dividual or agency appeals, The Court shall in each such 
case conduct a de novo hearing, and may order such relief 
as it finds to be required by equity. 
Added by St, 1972, c. 80S, § 1. 

§ 177. Violations; civil liability 

Any aggrieved person may institute a civil action in 
superior court for damages or to restrain any violation of 
sections one hundred and sixty-eight to one hundred and 
seventy-five, inclusive. If it is found in any such action that 
there has occurred a willful violation, the violator shall not 
be entitled to claim any privilege absolute or qualified, 
and he shall in addition to any liability for such actual 
damages as may be shown, be liable for exemplary dam- 
ages of not less than one hundred and not more than one 
thousand dollars for each violation* together with costs 
and reasonable attorneys' fees and disbursements incurred 
by the person bringing the action. 
Added by St.1972, c. 805, § 1. 

§ 178* Violations; punishment 

Any person who willfully requests, obtains or seeks to 
obtain criminal offender record information under false 
pretenses, or willfully communicates or seeks to com- 
municate criminal offender record information to any 
agency or person except in accordance with the provisions 
of sections one hundred and sixty-eight to one hundred 
and seventy^fivej inclusive, or any member, officer, em- 
ployee or agency of the board, the advisory committee, the 
council or any participating agency, or any person con- 
nected with any authorized research program, who will- 
fully falsifies criminal offender record information, or any 
records relating thereto, shall for each offense be fined not 
more than five thousand dollars, or imprisoned in a jail 
or house of correction for not more than one year, or both. 
Added by St.1972, e, 801, I L 



PROJECT SEARCH 

A Model State Act For Criminal 
Offender ■ Record I nformatiok * 

1. Ltgislattf e Findings and Purpose* 



* Reprinted from Project Search Technical Memorandum No, 3* 
May, 1971, 



The legislature finds and declares that a more effective 
administrative structure now is required to control the 
collection, storage, dissemination and usage of criminal of- 
fender record information, These improvements in the 
organization and control of criminal offender recordkeep- 
ing are imperative both to strengthen the administration of 
criminal justice and to assure appropriate protection of 
rights of Individual privacy, The legislature further finds 
that vigorous protection of such rights of individual pri- 
vacy is an indispensable element of a fair and effective 
system of criminal offender reeordkeeping, The purposes 
of this Act are ( 1) to control and coordinate criminal of* 
fender recordkeeping within this State; (2) to entourage 
more efficient and uniform systems of criminal offender 
recordkeeping; (3) to assure periodic reporting to the 
Governor and legislature concerning such recordkeeping; 
and (4) to establish a more effective administrative struc- 
ture for the protection of individual privacy in connection 
with such recordkeeping. 

2, Definitions* 

For purposes of this Act, (a) "criminal justice agencies" 
shall be understood to include only those public agencies at 
all levels of government which perform as their principal 
function activities (i) relating to crime prevention, include 
ing research or the sponsorship of research; (ii) relating 
to the apprehension* prosecution, adjudication, or reha- 
bilitation of criminal offenders; or (lii) relating to the 
collection, storage, dissemination or usage of criminal of- 
fender record information, 

(b) "crirninal offender record information" shall be un- 
derstood to include records and data compiled by criminal 
justice agencies for purposes of identifying criminal of- 
fenders and of maintaining as to each such offender a 
summary of arrests, pretrial proceedings, the nature and 
disposition of criminal charges, sentencing, rehabilitation 
and release. Such information shall he understood to he 
restricted to that recorded as the result of the initiation of 
criminal proceedings or of any consequent proceedings 
related thereto. It shall be understood not to include in- 
telligence, analytical and investigative reports and flies, 
nor statistical records and reports in which individuals are 
not identified and from which their identities are not as- 
certainable. 

(e) "Interstate systems" shall be understood to include 
all agreements, arrangements and systems for the in- 
terstate transmission and exchange of criminal offender 
record information, Such systems shall be understood not 
to include recordkeeping systems in the state maintained or 
controlled by any state or local agency, or group of such 
agencies, even if such agencies receive or have received in- 
formation through, or otherwise participate or have parti- 
cipated in, systems for the interstate exchange of criminal 
offender record information, 
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(d) "state" shall be understood to mean, unless other- 
wise expressly indicated, this state. 

3, Relationship to Other Statutes* 

(a) In the event of conflict, this Act shall to the extent 
of the conflict supersede, except as provMed In subsaction 
(b), all existing statutes which regulate, control or other- 
wise relate, directly or by implication, to the collection, 
storage, dissemination or usage of criminal offender re- 
cords, So far as consistent with this Act, the [state adminis- 
trative code shall govern the transactions and proceedings 
conducted pursuant to this Act], 

(b) Not withstanding the provisions of the subsection 
(a), this Act shall not be understood to alter, amend or 
supersede the statutes and rules of law which govern the 
collection, storage, dissemination or usage of records eon* 
eerning juvenile or youthful offenders. 

4, Criminal Offender Records Control Committee* 

(a) The Criminal Offender Records Control Committee 
(hereinafter the Committee) is established to regulate the 
collection, storage, dissemination and usage of criminal 
offender record information. The Committee shall be 
composed of persons representing the following state and 

local criminal justice agencies: [ 

The Committee's Chairman shall be appointed by [the 
Governor! and shall serve at his pleasure. The Committee 
may appoint and fix the compensation of a staff director, 
a legal counsel and such other staff personnel as it may 
from time to time deem appropriate. 

(b) The Committee may coordinate its activities with 
those of any interstate systems for the exchange of criminal 
offender record information, may nominate one or more 
of its members to serve upon the council or committee of 
any such system, and may participate when and as it 
deems appropriate in any such system's activities and 
programs, 

(e) The Committee shall adopt such regulations as it . 
finds appropriate to carry out its functions under this 
Act, 

(d) The Committee may conduct such inquiries and 
investigations as it finds appropriate to carry out its func- 
tions under this Act. It may for this purpose request any 
agency that maintains, or has received, or that is eligible 
to maintain or receive criminal offender records to> pro- 
duce for inspection statistical data, reports and other in- 
formation concerning the collection, storage, dissemination 
and usage of criminal offender record information, Each 
such agency is authorized and directed to pravfde such 
data, reports, and other information. 

(e) The Committee shall report annually to the Govern- 
or and legislature concerning the collection* storage, dis- 
semination and usage in this state of criminal offender 
record information, The Governor or legislature may re- 
quire such additional reports as they deem desirable. 



5, Security mid Privacy Council, 

(a) [The Governor] shall appoint a Security and Privacy 
Council (hereinafter the Council), consisting of a chair- 
man and not more than eight members, to conduct a 
continuing study and review of questions of individual 
privacy and system security in connection with the col- 
lection, storage, dissemination and usage of criminal of- 
fender record information. In appointing the Council, [the 
Governor] shall seek such representatives of the general 
public, state and local government* and the criminal 
justice community as may be expected to express fairly 
and vigorously the various interests involved. The Council's 
Chairman and members shall serve at [the Governor's] 
pleasure. The Council may appoint and fix the compensa- 
tion of a staff director, a legal counsel and such other staff 
personnel as it may from time to time deem appropriate. 
The Council shall meet at the call of the Governor, its 
Chairman, or any three of its members to carry out its 
responsibilities under Section n of this Act, to study 
the privacy and security implications of criminal offender 
records, or to formulate recommendations concerning their 
collection, storage, dissemination or usage, Each Council 
member shall be entitled to reimbursement for actual and 
necessary expenses incurred in the performance of official 
duties, 

(b) The Council may conduct inquiries and investiga- 
tions as it finds appropriate to achieve the purposes of this 
Act, The Committee, each criminal justice agency in this 
state, and. each state and local agency otherwise authorized 
access to criminal offender record information is authorized 
and directed to furnish to the Council, upon request made 
by its Chairman, such statistical data, re -vim, and other 
information as the Council deems necessary to carry out 
its functions under this Act. 

(c) The Council shall report annually to the Governor 
and legislature concerning both its responsibilities under 
Section 1 1 and other questions of privacy and security in 
connection with the collection, storage, dissemination and 
usage of criminal offender record information. It may 
make such additional reports and recommendations as it 
deems appropriate to carry out its functions under this 
Act 

(d) The Council may nominate one or more of its 
members to serve upon any .similar council or committee 
connected with any interstate system for the exchange of 
criminal offender record information, and may participate 
when and as it deems appropriate in the activities of any 
such system, 

6, Date Verification and Forging. 

(a) The Committee shall adopt regulations creating a 
continuing program of data auditing and verification to 
assure the accuracy and completeness of criminal offender 
record information. 
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(b) The Committee shall adopt regulations to assure 
the prompt and complete purging of criminal record in- 
formation, insofar as such purging is required. 

(i) by any statute or valid administrative regulation 
of this state; 

(ii) by the order of any court of competent juris- 
diction in this state; 

(Hi) by the law of any other jurisdiction, where the 
data or records in question have originated in that juris- 
diction; 

(iv) to correct any errors shown to exist in such in- 
formation; 

(v) to achieve any of the purposes of this Act, to 
improve the efficiency of criminal offender reeordkeep* 
jug* or otherwise to promote the fair and efficient ad' 
ministration of criminal justice, 

7. System Security, 

(a) The Committee shall adopt regulations to assure 
the security of criminal offender record information from 
unauthorized disclosures at all levels of operation in this 
state. 

(b) The Committee shall cause to be initiated for em- 
ployees of all agencies that maintain* receive, or are 
eligible to maintain of receive criminal offender record 
information a continuing educational program in the 
proper use and control of such information, 

§; Access. 

(a) Criminal offender record information shall be dis- 
seminated, whether directly or through any intermediary, 
only to (i) criminal justice agencies and (is) such other 
individuals and agencies as are, or may subsequently be, 
authorized access to such records by statute, The Commit- 
tee shall issue regulations to assure that such information 
shall be disseminated only in situations in which it is 
demonstrably required by the individual or agency for 
purposes of its statutory responsibilities. 

(b) It shall be the Committee's responsibility to deter* 
mine whether each agency requesting access to criminal 
offender record information is authorized such access us* 
der the tenna of this Act, The Committee shall, as to each 
such agency, make a finding in writing of its eligibility or 
non-eligibility for such access, Except as provided in sub- 
section (c) of this section, no such information shall be 
disseminated to any agency prior to the Committee's de- 
termination of its eligibility or, in cases in which the Com* 
mittee's decision is appealed under Section 12 of this Act 
prior to the final judgment of a court of competent juris- 
diction that the agency Is so eligible. 

(c) For a period of [six months] following the adoption 
of this Act, or until such time as the Committee completes 
its determination of the eligibility or non-eligibility for ac- 
cess of a requesting agency, whichever first occurs, any 
such requesting agency that is receiving criminal offender 



record information at the time of this Act's passage shall 
be deemed to be eligible for such access. 

(d) Each agency holding or receiving criminal offender 
record information shall maintain, for such period as is 
found by the Committee to be appropriate, a listing of the 
agencies to which it has released or communicated such 
information. Such listings, or reasonable samples thereof, 
may from time to time be reviewed by the Committee, 
Council, or any of their staff members to determine 
whether this Act or any applicable regulations have been 
violated, 

(e) Dissemination from any agency in this state of 
criminal offender record information shall, except for pur- 
poses of programs of research approved under Section 9, 
and with the further exception of instances in which a 
warrant has been obtained in accordance with subsection 
(f) of this section, be permitted only if the Inquiry is 
based upon name, fingerprints or other personal identi- 
fying characteristics, Hie Committee shall issue regulations 
to prevent dissemination of such information, except in the 
above situations, where inquiries are based upon categories 
of offense or data elements other than name, fingerprints 
or other personal identifying characteristics. 

(f) Notwithstanding the provisions of subsection (e), 
access to criminal offender record information on the basis 
of data elements other than personal identifying charac* 
teristics shall be permissible if the criminal justice agency 
seeking such access has first obtained from a (magistrate, 
iudge or justice) a class access warrant. Such warrants may 
be issued as a matter of discretion by a (magistrate, judge 
or justice of any court of this state) in cases in which 
probable cause has been shown that (i) such access is 
imperative for purposes of the criminal justice agency's 
investigational or other responsibilities, and (ii) the in- 
formation sought to be obtained is not reasonably avail- 
able from any other source or through any other method. 
A summary of each request for such a warrant, together 
with a statement of its disposition, shall within ninety days 
of disposition be furnished the Committee, 

9, Research. 

(a) The Committee shall issue regulations to govern the 
usage in this state of criminal offender record information 
for purposes of programs of research, Such regulations 
shall require preservation of the anonymity of the indivi- 
duals to whom such information relates, shall require the 
completion of nondisclosure apeeoients by all participants 
in such programs, and shall impose such additional re- 
quirements and conditions as the Committee finds to be 
necessary to assure the protection of privacy and security 
interests, 

(b) The Committee may monitor any such programs to 
assure satisfaction both of the requirements of this Act 
and of any applicable regulations. The Committee may, if 
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it determines either that such requirements have not been 
satisfied or that a program's continuance otherwise threat- 
ens privacy or security interests* prohibit access on behalf 
of any such program to criminal offender record infor- 
mation, 

(c) Any state or local agency may request the Com- 
mittee to evaluate any proposed program of research and 
to offer recommendations concerning its consistency with 
the purposes and requirements of this Act, 

10, Interstate Systems for the Exchange of 
Criminal Offender Record Information* 

(a) The Committee shall regulate the participation by 
all state and local agencies in any interstate system for 
the exchange of criminal offender record information, and 
shall be responsible to assure the consistency of such 
participation with the terms and purposes of this Act, 
The Committee shall have no authority to compel any 
agency to participate in any such interstate system. 

(b) Direct access to any such system shall be limited to 
such criminal justice agencies as are expressly designated 
for that purpose by the Committee. Where any such sys- 
tem employs telecommunications access terminals, the 
Committee shall limit the number and placement of such 
terminals to those for which adequate security measures 
may be taken and as to which the Committee] may im- 
pose appropriate supervisory regulations, 

11* Rights of Access and Challenge. 

(a) Each individual shall have the right to inspect 
criminal offender record information located within this 
state which refers to him. If an individual believes such 
information to be inaccurate or incomplete, he may request 
the agency having custody or control of the records to 
purge, modify or supplement them. Should the agency 
decline to so act, or should the Individual believe the 
agency's decision to be otherwise unsatisfactory, the in- 
dividual may in writing request review by the Council, 
The Council, its representative or agent shall, in each case 
in which it finds prima facie basis for complaint, conduct 
a hearing at which the Individual may appear with counsel, 
present evidence* and examine and cross-examine witnesses. 
Written findings and conclusions shall be issued. Should 
the record in question be found to be Inaccurate, incom- 
plete or misleading, the Council shall order it to be ap- 
propriately purged, modified or supplemented by an ex- 
planatory notation. Each agency or individual In the state 
with custody, possession or control of any such record 
shall promptly cause each and every copy thereof in its 
custody, possession or control to be altered in accordance 
with the Council^ order. Notification of each such de- 
letion, amendment and supplementary notation shall be 
promptly disseminated by the Committee to any indivi- 
duals or agencies to which the records in question have 
been communicated, as well as to the individual whose 
records have been ordered so altered, 



(b) Agencies at which criminal offender records are 
sought to be inspected may prescribe reasonable hours 
and places of inspection, and may impose such additional 
restrictions, including fingerprinting, as are reasonably 
necessary both to assure the record's security and to verify 
the identities of those who seek to inspect them, 

12, Appeal. 

Any individual or agency aggrieved by any order or 
decision of the Committee or Council may appeal such 
order or decision to the [trial court] in the county in 
which he is resident or in which the Council, the Com* 
rniitee, their representative or agent issued the order or 
decision from which the individual or agency appeals. The 
court shall in each such case conduct a de novo hearing, 
and may order such relief as it finds to be required by 
equity, 

13, Civil Liability. 

(a) Any person may institute a civil action for damages 
or to restrain any violation of this Act, or both. Should it 
be found in any such action that there has occurred a 
willful violation of this Act, the violator shall, in addition 
to any liability for such actual damages as may be shown, 
be liable for exemplary damages of not less than one 
hundred and not more than one thousand dollars for each 
such violation, together with costs and reasonable attorneys' 
fees and disbursements incurred by the person bringing 
the action, 

(b) If, in any civil action alleging the publication or 
dissemination of criminal offender records, it is found that 
the provisions of this Act or of any regulations issued 
there-under with respect to the communication or dissemi- 
nation of such records have been violated, the violator 
shall not be entitled to claim any privilege, absolute or 
qualified, as a defense thereto, 

14, Criminal Penalties. 

Any person who willfully requests, obtains or seeks to 
obtain criminal offender record information under false 
pretenses, or who willfully communicates or seeks to 
communicate criminal offender record information to any 
agency or person except in accordance with this Act* or 
any member, officer, employee or agent of the Comrnittee, 
the Council or any participating agency, or any person 
connected with any research program authorized pursuant 
to Section 9, who willfully falsifies criminal offender 
record information, or any records relating thereto, shall 
for each such ofTense be fined [not more than five thousand 
dollars, or imprisoned in the state penitentiary not more 
than two years, or both]. Any person who knowingly, 
but without criminal purpose, communicates or seeks to 
communicate criminal offender record information except 
in accordance with this Act shall for each such offense be 
fined [not more than one hundred dollars, or imprisoned 
not more than ten days, or both]. 
15, [Authorization of Appropriations.] 
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The committee heard first from Thomas Madden, 
General Counsel of the Law Enforcement Assist- 
ance Administration, who described the funda- 
mental balance to be struck in these policy determi- 
nations: 

Mr. Chairman, in your consideration of the right of 
privacy and criminal justice information systems it is 
important that you develop legislation which strikes a 
proper balance between the legitimate information needs 
of the criminal justice system and the constitutional 
rights of citizens affected by this information, 

Part of a citizen's right ©f privacy is lost through engage 3 
merit in criminal activity. By law or by custom in each 
state the facts of an individual's arrest, trial and convic- 
tion are all matters of public record. Law enforcement 
agencies maintain police blotters or arrest books which 
are generally open to the public. Grand jury indictments 
and records of court proceedings are available to the 
public in state and local courts, 

Legislation must be developed which clearly defines the 
degree to which a citizen's right to privacy should be 
further modified by contact with the criminal justice 
system, particularly where an arrest does not lead to a 
conviction. 

Madden identified the primary issues involved in 
developing Federal or state legislation as follows: 

(a) the administration of the privacy legislation 
and the noncompliance sanctions in the legis- 
lation; 

(b) the types of information to be covered; 

(c) the types of criminal justice agencies to be 
covered; 

(d) the use of criminal justice information for 
law enforcement purposes; 

(e) the noil-criminal justice use of criminal jus- 
tice information; 

(f) accuracy and timeliness of information; 

(g) access by the press; 

(h) access by individuals for the purpose of re- 
view and correction; 

(i) sealing and purging; and 
(j) security, 

Mr* Madden identified five essential types of 
criminal justice information: 

1 . arrest information, 



2, criminal record information, 

3. correctional or release information, 
4 criminal intelligence information and 

5. criminal justice investigative information 

He stated that different privacy standards are 
necessary to deal with the collection, dissemination 
and use of each type of information* and he later 
discussed the issue of non-criminal justice use of 
criminal justice information in terms of these classi- 
fications. He explained that It is generally agreed 
that intelligence information should not be made 
available for any non-criminal justice use or to any 
non-criminal justice agency except for national 
defense purposes or the protection of individuals 
whose lives are in imminent danger. He said tint 
investigative and correctional or release infemna- 
tlon should be similarly restricted, with the addi- 
tional possible exception of use essential to effective 
rehabilitation. 

There are, however, according to Madden, legiti- 
mate non-criminal justice uses for criminal record 
information and arrest record information. He sug- 
gested that such uses Include consideration in the 
processes of licensing or hiring for certain sensitive 
positions, but went on to state that only uses author- 
ized by statute or executive order pursuant to stat- 
ute should be permitted. He stressed that a distinc- 
tion should be made between arrest records that do 
not include dispositions and criminal record infor- 
mation. 

Another issue of major concern is the accuracy 
and timeliness of criminal justice information* Mr, 
Madden observed that the best protection of an indi- 
vidual's privacy may simply be to insure that any 
information maintained in a criminal justice infor- 
mation system Is accurate and that dispositions arc 
recorded in a timely manner so that information 
disseminated will be an accurate reflection of m 
individual's criminal history, He said" 

Legislation should require that every item of information 
entered in a system is cheeked for accuracy and 
plctencss before entry* and that inaccurate, incomplete, 
unclear, or ambiguous data should not he entered Ira a 
criminal justice information system. Legislation should 
require that steps be taken to assure that syztmmk 
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common thread was the vesting of most of the rule- 
making authority in a board or council He ex- 
pressed concern that the legislation provided few 
guidelines and possibly delegated greater discretion 
in the central agency than is constitutionally per- 
missible, 

A second common provision, which Mr, Murray 
felt was extremely critical* was the grant to the cen- 
tral agency of authority to control participation in 
interstate information systems. He said: 

Unless that central system has the authority to regulate 
and therefore to prohibit in appropriate instances the 
connection between a given locality and an interstate sys- 
tem, I think that state will And that it may be faced with 
a conglomerate that will very likely violate all of the 
basic principles that the central information system 
would normally try and expect to put in place, 

On the issue of non-criminal justice use of crimi- 
nal justice information, Mr, Murray noted a pro- 
liferation of statutes authorizing dissemination of 
information to non law-enforcement agencies and 
stated: 

In my view, the only rational way of approaching this 
problem of distribution of criminal history information 
outside of the criminal justice system is to start off with 
a comprehensive view of what is meant by the notion of 
rehabilitation and what it is we as a state or a society 
expect to accomplish by punishing an individual who 
has been convicted of a crime, On the one hand, we are 
likely to say that that Individual, having paid his debt, 
as it were, ought to be restored to full membership in 
the society. But, on the other hand, wherever the 
activity in which that person engages somehow or other 
has some slight degree of delicacy or sensitivity attached, 
we immediately throw up barriers because of a prior 
conviction, I think, if we are to bring any degree of 
semblance of order to the system, we should first decide 
what are really the legitimate impediments caused by 
conviction* We should then decide what areas of activity 
truly are imperiled if a person participates who has a 
prior criminal history, and then some sort of a circle 
drawn around that area of activity and only In the case 
of licensing or employment in that particular limited 
area should there be authority to use a prior conviction 
as a bar to participation, 

Capsulizing the especially thorny problem of 
criminal intelligence information, Murray com- 
mented: 
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I suspect that criminal intelligence information is per- 
haps the most serious aspect in terms of potential in- 
formation damage of all the items of information col- 
lected with the data banks of this sort. 

At least in the instance of criminal history information, 
one has the option of going back to the police blotter or 
back to the court dockets or back to the entry registers 
at the correctional institution to verify whether or not 
this individual did, in fact, get arrested, was, in fact, 
convicted, and was, in fact, received in an institution. 
Intelligence information, however, by virtue of its very 
nature, is very often less than complete, very often not 
verified, very often not verifiable. 

Murray expressed the opinion that each of the 
criminal justice information bills considered in this 
seminar hearing had failed adequately to deal with 
the problems of collection, maintenance and dis- 
semination of this type of information, and he rec- 
ommended that these matters be dealt with and not 
postponed or ignored* Mr, Murray expressed strong 
support for the inclusion of a provision such as that 
in the Iowa statute which imposed a duty upon the 
court to report disposition information. 

The next witness was Mr, Edward J, Kelly, 
Chairman of the Iowa State Bar Association's Spe- 
cial Committee on Traffic Records and Criminal 
Information Systems, He opened by stating his dis- 
position in favor of the Iowa statute's vesting the 
administration of a criminal justice information 
statute within a commission as opposed to a single 
individual: 

This commission, as you will be interested in knowing, 
is composed of two senators selected by the lieutenant 
governor of the state as the presiding officer; two mem* 
bers of the House of Representatives, selected by the 
speaker of the house; a judge serving In the District 
Court of Iowa, selected by the governor; two citizens 
at large not engaged in any law enforcement activity 
whatsoever, selected by the governor; and one law en- 
forcement official selected by the governor and the 
director of public safety. 

That gives a board of nine persons charged with the 
administration and responsibility of this act, We have 
felt in Iowa that that's a better solution than that sug- 
gusted by the other panelists because men you bring 
to bear the opinions and judgments of a cross-section 
of the community, 

Kelly pointed out that the security of data main- 



tained by law enforcement units is a ticklish prob- 
lem in rural communities where caretaking of infor- 
mation is less sophisticated than in urban areas, and 
stressed the need for development of safeguards, 
especially as technological advances increase the 
flow of information. 

Chairman Quinn questioned Kelly about the pri- 
vacy implications of newspaper data banks contain- 
ing criminal history Information and the following 
discussion ensued: 

Kelly: My own personal judgement is that if the news- 
paper wants to go the expense of keeping a file on you 
and mi, that's their responsibility. They have a right to 
do that 

Q: How about private organizations setting up their 
own information systems, simply going to public records 
and collecting arrest and other criminal history records 
information, and silling it to employers? 

Kelly: I know of nothing in the law that prohibits you 
from setting up a corporation and buying the necessary 
hardware and putting on that hardware the information 
you think is important about any subject. Whether or 
not it brings on libel or slander or causes you liability 
is another question. 

At another point, Kelly stated that he felt there 
was no need to differentiate between manual and 
computerized systems as far as controls and sanc- 
tions are concerned. 

Strong opposition was voiced in response to the 
suggestion of one attendant that a Federal agency 
should be created and charged with responsibility 
for mandatory collection of all records maintained 
on individuals and for centralization of this infor- 
mation so that an individual could go to one source 
to find out about records kept about him* The con- 
sensus seemed to be that the potential dangers in- 
volved in aggregation of information outweighed 
the benefit of convenience for die individual. 

Mr, Richard Harris, Director of the Virginia 
State Planning Agency, was the fourth and final 
witness to testify, 

He highlighted several areas of concern he felt 
must be addressed by legislation regulating collec- 
tion and use of criminal justice information: 

L Proper and sufficient justification must be 
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demanded for the collection and storage of 
criminal justice data, 

2, In turn, controls must be imposed on the 
storage of this data in the system as well as 
its dissemination and use, 

3, A distinction must be made as to the type 
and classification of information within the 
system. 

4, Provisions must be made for verification of 
the information collected and, stored and for 
its destruction when obsolete, 

5, Questions about an individual's access to his 
own records with review and correction of 
inaccurate or incomplete information must 
be answered, 

6, Finally, a determination must be made as 
to where authority should rest for monitoring 
the operating procedures of criminal justice 
information systems at the Federal, state, and 
local levels. 

With regard to the issue of control, Harris stated 
that, notwithstanding the expenditure of Federal 
funds for criminal justice data systems, the majority 
of actual operation and maintenance is at the state 
and local level and therefore the majority of control 
should also remain at the state and local level, 

Harris emphasized that questions of manage- 
ment techniques and cost effectiveness should not 
be separated from those of privacy and security, and 
the relationship among these Issues should be 
addressed by any legislation drafted. He also dis- 
cussed the issue of the individual's right to review 
criminal justice records: 

In addition to keeping general administrative records, 
we feel that agencies operating such criminal justice 
data systems must be required to maintain records iden- 
tifying the source of information and to whom it was 
disseminated, Such a transaction log is useful for at 
least three reasons. It will notify the individual con- 
cerning who received that information about him, It will 
assist the data bank in easy retrieval of records dis- 
seminated and, from a management standpoint, it will 
allow monitoring of the usage of active flies. 
Provisions must also be made for the cost of such re- 
view and possible challenge, Are we to have some fund 
set up, as we do for indigent defendants, to provide pay- 



ment for the challenging at taxpayers* expense and to 
engage in the expense of litigation and administrative 
procedures over his particular challenge, assuming for 
the moment that it occurred? What is going to be the 
eost*eftectiveness of that procedure? Do we have the 
funds at Federal, State or local levels to provide for that 
kind of procedure? 

Undue burdens should not be placed on the individual 
by requiring him to seek out the agency responsible for 
an inaccurate entry. This requirement should rest with 
the operating agency, as does the responsibility for keep- 
ing the data complete, accurate, and up-to-date. 
On the other hand, the individual must bear some of 
the administrative costs of his access and possible chal- 
lenge to deter unnecessary entry and challenges. It seems 
to me that there is potential, looking at it from the other 
side, for disruptlveness on the part of individuals or 
organizations if they have unlimited rights of challenge, 

The discussion centered next on the question of 
a possible distinction between criminal history files 
maintained by different branches of government, 

Quinn; We've been talking about criminal history files, 
and I wonder whether any member of the panel dis* 
tinguishes between criminal history files kept by the 
executive branch agencies and those kept by the judicial 
branch of government, and what relationship, if any* 
there should be between them, 

Harris: Well, my answer is that the criminal history 
data maintained at the State level should be one set of 
criminal history data, and it should have within it all 
the data that's needed by the various divisions of the 
criminal justice system with the right of each to draw 
upon those elements of criminal history of the particular 
individual applicable to their function, 
Murray: There Is a need for contributions from all 
elements of the system. The police may supply to your 
agency the information that an individual has been ar- 
rested, but it would certainly be preferable to get in- 
formation about the ultimate disposition from the court 
than to get it from the police. Similarly, business about 
the release of the individual should come from toe cor* 
rectional side. 

An attendant raised a question concerning the 
effect of the separation of powers doctrine on an 
information system involving die judicial with the 
executive branch. Chairman Quinn responded that 
no problem existed in Massachusetts at present, but 
that the Supreme Judicial Court had been asked 
whether legislation creating a single computer bank 
to hold all the data of court personnel, court 
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records^ court information, and executive depart- 
ment information would be constitutional. Hie 
Court had responded in the negative on the basis 
of the separation of powers doctrine. An attendant 
noted that one interesting point made in the opinion 
was the suggestion of a need for a fourth branch of 
government related to information services, 

Mr, Harris stated that at the outset there must be 
a clarification of the type of data to he contained in 
a system, and that the content would depend upon 
the primary use for which the information is col- 
lected and stored. He continued: 

For example, the term "criminal justice intelligence in- 
formation" must be distinguished from "criminal justice 
information.'* A chief difference between the two terms 
is that the latter is specifically oriented to present crimi- 
nal justice activity while the former Is retained for pos- 
sible future use, That is, criminal justice information is 
maintained for general criminal justice agency use and 
should contain each and every transaction presently per- 
taining to an individual; whereas, "intelligence 1 ' infor- 
mation is specifically oriented to law enforcement agency 
use and maintained for possible future apprehension and 
surveillance. 

In the intelligence community, analysis is what is done 
to produce intelligence. What you collect is not in- 
telligence; what you collect is information. It is the 
analysis of the information that makes it intelligence. 
This difference should lead legislative drafters to con* 
sider another difference: that intelligence information 
may not be as fact-oriented and verifiable as criminal 
justice Information. These two considerations may not 
be true in every case, but are representative. 

Thus, provision must be made for the collection and 
storage of Intelligence information, with strict controls 
placed on its dissemination, and under no circumstances 
should this type of information be disseminated to non- 
criminal justice agencies or to private industry. 

Access to criminal justice information systems by non- 
criminal justice agencies and especially private industry 
must not be allowed, unless by specific statutory autho- 
rity. If good reason can in fact be provided for allow- 
ing certain non-criminal justice agencies access to certain 
data for specific reasons, stringent restrictions and re- 
gulations must be mandated in the legislation, 

Harris pointed out that once information has 
been disseminated from a criminal justice data 
bank, it is impossible for the disseminating agency 
or data bank to maintain direct control over the 



information, He stressed the need for insurance of 
necessary controls, while recognizing that absolute 
control is a practical impossibility, While prohibi- 
tion of direct dissemination of printed information 
or records is one of the most meaningful controls 
over secondary dissemination, according to Harris, 
differing translations, unreliability of verbal com- 
munications, possible infringement on an individ- 
ual's right of review and the impediment placed on 
law enforcement make this approach impractical 
He suggested that one practical solution might be 
to require the return of all document copies, printed 
transmittals, and original correspondence to the 
original sender, with stiff penalties for secondary 
dissemination and non-compliance, 

Harris briefly outlined several steps taken in the 
State of Virginia in response to die need for control 
in the production of personal data and the safe- 
guarding of the individual right to privacy; 

The Governor's office has concluded that the executive 
branch must formulate definitive policies relating to in* 
formation privacy and security, A full-fledged effort to 
develop these policies within the next month is now un- 
derway. The Governor's cabinet has initiated a special 
project to aid in the development of an executive policy 
that v m! (!) provide an inventory of existing automated 
information systems in state agencies and of the present 
practices of those systems relative to information privacy 
and security; (2) survey the needs of operating agencies, 
operating constraints and considerations posed by each 
unique situation; and (3) research alternative methods 
that might be adapted by an agency to cope with all 
aspects of privacy and security. 

In the legislative branch, two separate study resolutions 
passed at the 1974 General Assembly will result in the 
presentation of privacy and security legislative proposals 
at the 1975 session. 

Senate Joint Resolution 10 directed the Virginia Ad^ 
visory Legislative Council to study and report "on all 
aspects of the problems involving personal privacy and 
liberty In the use of computers " The Commission has 
been charged to "study the experience of other states 
and make a recommendation concerning the establish- 
ment of a privacy and security council in the Com- 
monwealth of Virginia," The VALC has established a 
committee to study computer privacy and security, which 
is now well into its examination of public and private 
personal information systems. 
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Senate Joint Resolution 63 created a "Comprehensive 
Criminal Justice Information System Task Force" under 
the direction of ths Virginia State Crime Commission, 
The Task Force has been directed to "make a full and 
complete study of aU matters relating to the exchange, 
collection, storage, security, privacy, and use of infor- 
mation in the Virginia criminal justice system" and to 
"make recommendations as to the development and im- 
plementation" of an integrated criminal justice infor- 
mation network, The Task Force his been concenfrating 
heavily on security and privacy controls in the formula- 
tion of its recommendations. 

This concluded the testimony of Mr, Richard 
Harris, Following a brief summary by Chairman 
Quinn of the various issues raised* the session was 
adjourned. 
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The Chairman of the mock legislative hearings 
on public employee records was Erie Plaut, M,D,, 
Deputy Commissioner of the Department of Mental 
Health from the State of Indiana/ Committee mem- 
bers included Jerry T, Pierce, State Senator from 
Oklahoma, and Joan Vollmer, Deputy Commis- 
sioner of Personnel for the State of Tennessee. Wit- 
nesses before the committee included Gary D, 
Bearden, Director of the Bureau of Manpower 
Information Systems of the U, S, Civil Service Com- 
mission, Harry B, Douglas, Jr., Coordinator of 
Equal Employment Opportunity for the State of 
Florida, and Sheldon Mann, Economist from the 
Research Department of the American Federation 
of State, County and Municipal Employees, 

Materials sent to all Seminar participants in 
advance of the meeting included the issue paper 
reprinted below* 
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PRIVACY SAFEGUARDS FOR 
PUBLIC EMPLOYEES' RECORDS 



Frequently, personnel records contain collections of in* 
formation acquired from many sources and unknown to 
the individual employee or applicant for employment. This 
information, often widely shared among officials of the 
employing organization and with other organizations, is 
used for a variety of personnel management purposes and 
to answer queries from creditors, law enforcement 
agencies* private investigators, recruitment agencies, and 
prospective employers. These varied uses, in the absence 
of good information management practices, can con* 
stitute a substantial threat to the personal privacy of the 
individuals about whom personnel records are maintained. 

Personnel mnnagm must assure that thi personnel 
management system contains the information needed to 
carry out their responsibilities effectively! at the same 
time, they must take Ml steps necessary to protect the per* 
sonal privacy of current or prior employees and applicants, 

APPLICABLE PRINCIPLES 

Five fundamental principles for handling personal in- 
formation in the files of any record-keeping organization 
are gaining wide acceptance: 

1, There must be no personal data record-keeping opera- 
tion whose very existence is secret. 

2, There must be a way for an individual to find out what 
information about him is in a record and how k is 
used. 

3, There must be a way for an individual to prevent 
information about him that was obtained for one pur- 
pose from being used or made available for other pur- 
poses without his consent, 

4= There must be a way for an individual to correct or 
amend a record of identifiable information about him- 
self, 

5- Any organization creating, maintaining, or disseminat- 
ing records of Identifiable personal data must ensure the 
reliability of the data for the intended use and must take 
precautions to prevent misuse of the data, 

ISSUES 

Because it is difficult to specify in advance, and for all 
time, which Items of information may be required to sup- 
port personnel management processes, the personal privacy 
of individuals who are the subjects of personnel records 
cannot be protected simply by proscribing the collection of 
certain types of data, Nor will data security safeguards 
alone accomplish the task since the key issues are policy 
issues: who shall be authorized to use which Information 
for which purposes, under what circumstances; and with 
what restrictions on further use, disclosure, or dissemina- 
tion? What is needed, in short, is a well-planned, coordi- 
nated program of personnel information management based 
on the five principles set forth above, In addition, for a 
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personnel information management program to be effective* 
it is essential that the responsibility for setting and en- 
forcing necessary safeguards rests with top management, 
that the effectiveness of the safeguards are monitored and 
periodically evaluated by an audit group, and that sanctions 
are imposed when procedures are violated, 

For state and local government employers, the basic 
principles, operating rules, audit obligations, and sanctions 
could be established by legislation, executive orders, or 
agency regulations. It is probably advisable to treat em- 
ployee privacy considerations separately through one of 
these devices rather than within the framework of pri- 
vacy legislation applicable to general government data 
banks, In employer-employee matters, government's in- 
volvement with the individual goes beyond the relationship 
of the constituted governing authority to the citizen. There- 
fore, special treatment in the application of privacy prin- 
ciples is justified, In addition, the kinds of records kept 
and the services and benefits offered to employees by a 
government will be basically uniform,* 

In any event, once She ground rules have been set, 
whether by legislation or administration actions, detailed 
procedures should be developed for controlling the ac- 
quisition, retention, and dissemination of information con- 
cerning public employees, For the information manage- 
ment program to be most effective, the procedures for 
collecting, maintaining and disseminating information must 
be standardized and well documented, Detailed procedures 
tell users how they are to treat information and give audi- 
tors a standard for evaluating user performance. 

Ideally, the detailed operating procedures should make 
clear which items of information individuals are required 
to provide about themselves, which items they may refuse 
to provide, and the purpose for which the information is 
requested, They should provide for a designated point at 
which user requests for information are received and pro- 
cessed, The procedures should also specify how long infor- 
mation is to be retained; who is allowed to see or to 
change it and under what circumstances; the security pro- 
cedures to be adopted to control access to it; and the me- 
thods to be used for verifying the accuracy and timeliness 
of information, 

The matter of unqualified access to records by the in- 
dividual involved does raise questions, For example, should 
he have full access to medical information, or information 
supplied in confidence to the employer or prospective em- 
ployer? Further, access to employee records by others in 
the employing organization requires careful analysis, de- 

* It cart be argued that in the private lector legislation to regulate 
employee records would be difficult to implement since the configura- 
tion of employee records win vary widely in accordance with the 
nature of the business, the size of the organization and the scope of 
employee services or benefits provided. 
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pending upon the variety of services or benefit? available 
through the employer and the relationship of the informa- 
tion to employee performance. For instance, who should 
be able to see whether an employee has token out a loan 
or mortgage, has life insurance, or Ns had checks returned 
for insufficient funds? To whom are performance evalua^ 
tions relevant or a list of employee activities or club 
memberships? 
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Also sent to Seminar participants in advance was 
an illustrative draft bill concerning the protection 
of public employee rights of privacy, which served 
as a basis for the Committee's deliberations and is 
reprinted In full below: 



A BILL 

To protect the constitutional rights and privacy of in- 
dividuals who are employed by government and about 
whom personal information has been collected for per- 
sonnel management purposes. 

Title I^Declaratiqn Of Policy : Definitions 

Findings And Declaration Of Policy 

SEC, 101. The personnel management missions that are 
a part of any large government organization require a 
substantial output of information about individuals and 
about agency operational programs. This information is 
required for such purposes as: 

1, Determining eligihiity of individuals for employment. 

2, Determining physical and mental fitness of individuals 
for the work required. 

3, Setting occupational standards and developing pen 
sonnel management policies, 

4, Evaluating personnel management programs, 

5, Maintaining morale and discipline in the work force, 

6, Processing grievances and appeals. 

7, Determining entitlement to and amount of employment 
and retirement benefits. 

Government agencies must assure that the personnel 
management system contains operational and personal in 
formation necessary to cany out the above purposes ef- 
fectively, while at the same time taking all the steps 
necessary to protect the privacy of individual applicants, 
employees, and retired persons about whom information 
is maintained, 

These agencies must strive to protect the privacy of in- 
dividuals by controlling the disclosure and use of identify- 
ing numbers and indentifiable personal information and 
assuring the security and accuracy of all steps in the in- 
formation process, If personal information about an in- 
dividual is compromised, that individual is compromised. 

Definitions 

SEC* 102* For purposes of this Act— 

(1) "Automated system" means an information system 
that utilizes electronic computers, central information 
storage facilities, telecommunication lines, or other auto- 



matic data processing equipment used wholly or in part 
for data collection, analysis, or display, as distinguished 
from a system in which such activities are performed 
manually. 

(2) "Dissemination" means the transmission of infor- 
mation, whether orally, in writing, or by automated media, 

(3) 'Personal information" includes all data that (a) 
describes anything about an individual* such as indentify- 
ing characteristics, measurements, test scores; (b) indicates 
things done by or to an individual, Including, but not limit- 
ed to, records of financial transactions, or medical treat- 
ment; or (c) affords a clear basis for inferring personal 
characteristics or things done by or to an individual, in- 
cluding, but not limited to, the record of his presence in 
a place, attendance at a meeting, or attendance at some 
type of service institution, 

(4) "Personnel management" jieans the process of 
managing personnel programs involving the organized col- 
lection of past, present and projected information about 
operations and personnel for the purpose of planning and 
controlling those programs. 

(5) "Statistical and research purposes 1 * means a use 
which will not have a direct effect on any specific individual 
and the principal output of which is based on aggregate 

data. 

Title II — Collection And Dissemination Of 
Personnel Information Used For 
Personnel Management 

Collection of Persona! Information 

SEC* 201, The commissioner of civil service will prescribe 
the basic personal information that shall be collected and 
used in each personnel management function or process, 
in accordance with the provisions of this Act 

Each department and agency that wishes to obtain ad- 
ditional personal information beyond the basic information 
prescribed by the commissioner will be required to justify 
its need for the additional information. 

Justifications of such additional personal information 
must be based on the following criteria: 

(1) Items of personal information sought must be re- 
lated to specific personnel management processes that are 
authorized by statute, executive ©refer, or regulation. 

(2) Hie relationship between tin information sought 
and the personnel management putp^Q to be served must 
be demonstrated, 

(3) The procedures to be employed in collecting, pro- 
cessing, storing, safeguarding, using* releasing, dissemi- 
nating, and disposing of persona] information must be 
described and must conform with civil service policies and 
regulations relating to protection of individual privacy. 
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Personal information needed for personnel management 
purposes will not be obtained by surreptitious methods or 
by means that cannot be disclosed to the individuals in 
volved, 

Storing, Safeguarding, Processing 
Personal Information 

SEC, 202, Agencies shall take adequate precautions to 
prevent unauthorized access to personnel management 
records containing personal information. 

This section pertains to records maintained in manual 
filing systems as well as those in automated systems. 

This secdon requires agencies to set up reasonable com- 
binations of physical security, administrative controls* and 
technical safeguards to prevent unauthorized access to 
personal information records, to provide for audits, to 
permit investigations when unauthorized access does occur, 
and to identify officials responsible for security of the 
records. 

The agencies shall maintain, among employees respon- 
sible for safeguarding and using personal information 
records a privacy-conscious environment through continual 
training, audits and test-runs of security measures, and 
enforcement of rules, 

Release of Persona! Information for Personnel 
Management Purposes 

SEC* 203* Personal information in personnel records of 
agencies shall be disseminated to other agencies for 
authorized personnel management purposes only on a 
need-to*know basis. 

An agency shall disseminate personal information to 
representatives of other agencies only when they are 
identified and authorized or certified by agencies to 
receive it. 

An agency shall release personal information to another 
agency only after determining that the safeguards of the 
receiving agency for the security of information and 
procedures for using the data meet the criteria of this Act, 

An agency will disclose personal information only on a 
need-to-know basis to management officials for personnel 
management decisions, or for personnel management pro- 
ceedings, of to personal representatives authorized by the 
individual to see it, 

Lists of individuals eligible for appointment or in- 
service placement will not be checked or compared with 
lists of individuals affiliated with or active in a political 
party or a union. 

Release of Personal Information for Purposes Other 
Than Personnel Management 
SEC 204, Personal information that is gathered for per- 
sonnel management purposes will not be released by the 
government for purposes other than personnel manage- 



ment, nor released outside normal personnel management 
organizational channels except with the consent of the 
individual involved. When personal information is released 
as required by statute or executive order, the individual 
shall be notified in writing by the releasing agency, 

Agencies shall release personal information only for 
personnel administration or public policy purposes, and 
not for commercial purposes or solicitation, 

Agencies will release personal information in authorized 
circumstances only when it has been determined that those 
receiving the information will safeguard and use it in 
accordance with the criteria in this Act, 

Additional restrictions on disclosure of personal in- 
formation to organizations or individuals outside the per- 
sonnel management Meld are as stated below ; 

1 Information about disciplinary actions or appeals from 
personnel management actions that is disclosed to 
individuals or organizations other than those directly 
involved in litigating or settling such cases will identify 
the offenses alleged and corrective actions taken but will 
not identify the individuals affected without their con- 
sent, until completion of all administrative proceedings 
and appeals. 

2 Information about physical or mental disorders of an 
individual employee will be disclosed only with the 
individual's consent and only to licensed medical per- 
sonnel who are professionally qualified to understand it 
and use it properly, 

3 Evaluations of individual work performance of em- 
ployees will not be disclosed to officials or agencies other 
than those directly involved in considering trie employee 
for in-service placement except with the consent of the 
employee, 

4 Home addresses or home telephone numbers of em- 
ployees, or other information about individual employees 
will not be disclosed except as required by law, 

5 Records of legal* financial, medical, or other personal 
involvements of individual employees will not be dis- 
closed to individuals or organizations outside the official 
personnel management field, 

Use of Personal Information in Statistical 
Reports and Research Studies 

SECi 20S, Agencies will assure that the identity of indi- 
viduals included in statistical samples or compilations in 
connection with authorized studies or research projects will 
not be disclosed, either by means of identifying informa- 
tion or numbers or by means of statistical manipulation to 
isolate data which can pertain to only one individual in 
the sample, 

When statistical or research qestions are included in 
questionnaires or forms used in personnel management 
functions, the individual will be informed whether or not 
responses to the questions are mandatory, 
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When persona! information is transferred from one 
organization to another for statistical or research purposes, 
the organizations concerned shall be required to comply 
with the provisions of this Act, 

Informing Individuals Regarding Information Required 

SEC* 206* Individuals who apply for examnations, jobs, 
in-service placement training, employment benefits* retire- 
ment, or other benefits or rights associated with civil 
service employment will be informed: 

1 What personal information is needed to carry out the 
personnel management process involved, 

2 What information will be obtained in addition to that 
provided by the individual and from what sources, 

3 That the information provided by the individual may 
be checked or verified by comparison with other records 
held by schools, law enforcement agencies, employers, 
financial institutions* or other organizations, 

4 What measures will be taken to safeguard personal 
information from unauthorized access or use. 

5 That some of the information will be transferred to 
other organizations and officials for actions and decisions 
consistent with the purpose for which the individual 
provides the information. 

6 That the individual has the right to know what in- 
formation is included in records that will be used in 
making decisions about him or her. 

Individual's Access to Personal Information 

SEC* 207* Individuals shall be advised upon request what 
information is in personnel management records about 
them which will be used in making decisions relating to 
them, 

Agencies shall accept information from individuals to 
correct* amend, or refute records that are inaccurate or 
incomplete for the purpose of making decisions about the 
individuals. 

Before individuals are barred from examinations* denied 
appointment, removed from the service as unsuitable for 
employment, or are otherwise denied benefits based on 
information in records about them, they will be afforded 
an opportunity to challenge the proposed action in an 
appropriate administrative proceeding. Such challenges may 
be to the accuracy* reliability* completeness, or relevance 
of the information on which the proposed action is based. 

TITLE III— Administrative Provisions: Regulations, 
Civil Remedies: Criminal Penalties 

Administrative Provisions 

SEC* 301* Any agency maintaining an automated person- 
nel management system containing personal information 
shall give public notice of the existence and character of 
its system once each year, Any agency maintaining more 
than one system shall publish such annual notices for all 



its systems simultaneously. Any agency proposing to 
establish such a system* or to enlarge an existing system* 
shall give public notice sufficiently in advance of the initia- 
tion or enlargement of the system to assure individuals 
who may be affected by its operation a reasonable oppor- 
tunity to comment, The public notice shall specify— 
f 1 ) the name of the system; 

(2) the nature and purposes of the system; 

(3) the categories and estimated number of persons on 
whom the data is maintained; 

(4) the categories of data maintained, indicating which 
categories are stored in computer-accessible flies; 

(5) the agency's operating rules and regulations issued 
pursuant to sections 202 and 207* and the agency's 
policies and practices regarding data information 
storage, duration of retention of information, and 
disposal thereof; 

(6) the categories of information sources; 

(7) a description of all types of use made of information, 
indicating those involving computer-accessible files, 
and including all classes of users and the organiza- 
tional relationships among them; and 

(8) the title, name, and address of the person immedi- 
ately responsible for the system. 

Annual Audit 

SEC* 302. At least once annually the commissioner shall 
conduct a random audit of the practices and procedures 
of the agencies which collect and disseminate personal 
information to insure compliance with the requirements 
and restrictions of this Act. 

Each personnel management system shall conduct a 
similar audit of its own practices and procedures at least 
once annually. 

The results of such audits shall be made available to 
the public by July 1 of each year beginning on July 1 
following the first full calendar year after the effective 
date of this Act, 

Civil Remedies 

SEC* 303, Any person aggrieved by a violation of this Act 
shall have a civil action for damages or any other ap- 
propriate remedy against any person, or agency responsible 
for such violation provided he has exhausted the admin is» 
trative remedies of section 207. 

Such person may bring a civil action under this Act in 
any district court for the district in which the violation 
occurs, or in any district court in which such Person resides, 

Criminal Penalties 

SEC, 304, Whoever willfully disseminates, maintains* or 
uses information knowing such dissemination} maintenance, 
or use to be in violation of this Act shall be fined not 
more than $5,000 or imprisoned for not more than five 
years, or both. 
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Dr, Plaut opened the committee session with 
comments on historical conceptions of the roles and 
relationships of public employees that have resulted 
in policies and guidelines for this group, which 
differ from those applied to employees in the private 
sector, For example, the Hatch Act and similar 
State legislation have regulated the political activi- 
ties of public employees, and various laws have pro- 
hibited or restricted strikes by government workers, 
Obviously, the relationships between governments 
and their employees in these as well as other areas 
are currently undergoing reevaluation and change, 

Access to information about ; lie employees is 
an emerging issue that calls for ecial considera- 
tion in a conference concerned ith government 
record-keeping. In particular, two seemingly con- 
flicting questions need to be addressed: 

1 , Does the size and power of government require special 
measures to protect public employees' privacy when 
records are maintained about them for personnel 
management purposes? 

2, To what extent does the public accountability of the 
government employee and, in some cases, the potential 
for abuse of the power delegated to him, call for 
handling information about him in a different manner 
from that which would be appropriate in the private 
sector? 

At this point the first witness, Gary Bearden of 
the U* S, Civil Service Commission, was called 
upon to testify, Bearden pointed out that the Civil 
Service Commission, as a personnel management 
agency for public employees, endorses, in principle, 
legislation that: 

Permits any employee to inspect his own records and 
to know what information is maintained about him; 

Permits an employee to supplement information con- 
tained in his record; 

Permits the removal of inaccurate information; 

Allows the individual to challenge any information used 
in an adverse action against him; and 

Restricts employee record access to those who need the 
information for the performance of their duties, 

Existing Civil Service Commission regulations 
generally reflect these considerations. However, 



they do not permit Federal employees to review 
some information in their personnel records, i, e. 

Medical information that could have an adverse impact 
on an individual, except through a physician of the 
employee's choice who may disclose and/or interpret 
medical information to hsm; 

Testing and examination material, the disclosure of 
which wouli* ampromise the competitive examining 
process; 

Reports of suitability or security investigations that 
would disclose the source of the information; and 

Supervisors* appraisals of an employee's potential for a 
future assignment, although appraisals of past perform- 
ance are reviewed and discussed with the employee- 

The Civil Service Commission believes that these 
exceptions to the principle of direct subject access 
to personnel records are justified* The draft bill 
under consideration provides for no such excep- 
tions- Also* legislation on public employee records 
should clearly indicate whether an individual is per- 
mitted actually to examine his record and make a 
copy of it, If so, data identifying other individuals 
should be deleted, such as lists that identify other 
candidates for a competitive position, 

A bill should also specify procedures whereby an 
employee may supplement his record, The addition 
of large amounts of material to records in an auto- 
mated system could create excessive costs and other 
operating problems. In these instances, the record 
in the automated system could note the existence 
and location of supplemental material maintained 
elsewhere* 

The questioning of the witness and the discussion 
that followed focused on the following issues: 

First, as provided in the draft bill, applicants for 
public employment or related benefits should be 
informed that personal data they furnish will be 
verified by comparison with records of other organ!- 
zations such as educational institutions, law 
enforcement agencies* or former employers. In re* 
sponse to a comment that this type of checking, in 
the absence of any reason to doubt the information 
provided, implies that the applicant is guilty until 
proven innocent, Bearden mentioned that verifica- 
tion of qualifications is important in a competitive 
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examination and evaluation process. Verification 
can identify the few individuals who falsify or 
exaggerate their qualifications and who thus have 
unfair advantage over the majority who respond 
honestly in submitting their qualifications. 

There was general agreement that the information 
verified should be limited to that needed to com- 
pare qualifications with job requirements, Bearden 
pointed out, however, that in the public sector there 
are statutory requirements for information that do 
not relate directly to job performance* e, g, infor- 
mation reflecting agencies 1 participation m equal 
employment opportunity programs and statistical 
data to develop profiles of the work force which 
are used for a variety of personnel management 
purposes. 

Second, justification was seriously questioned for 
denying a public employee access to his supervisors 
appraisal of his potential for new responsibilities. 
The Civil Service Commission believes that dis- 
closure of this type of appraisal could damage an 
employee's effectiveness and his relationship with 
his supervisor in cases where the latter believes that 
the employee (who may be outstanding in his pres- 
ent job) is not suited for a different type of position. 

Third, the principle of giving an individual direct 
access to his medical records is generally gaining 
support; thus, there was some reluctance expressed 
about requiring access through a physician. How- 
ever, disagreement with this approach was slight, 
as long' as the individual has an opportunity to 
comment on and/or amend information in his 
record. 

Fourth, the draft bill requires that an applicant 
for public employment shall be informed that infor- 
mation he furnishes will be transferred to ethers for 
use consistent with the purpose for which it was 
provided. To assure that information is used in 
accordance with this provision, a public employer 
should publish notice of all proposed uses of the 
information! including notice of any organizations 
or officials who may be recipients of the data. 

Fifth* concerns were expressed about the kinds 
of information about individuals collected and used 
in connection with suitability or full field investiga- 
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tions for employment in critical-sensitive govern- 
ment positions. These evaluations illustrate the 
problems associated with balancing the need for 
information on which to base informed judgments 
in the selection of high-level public officials with 
the privacy interests of the individuals involved. Mr, 
Bearden pointed out that under Civil Service Com- 
mission regulations an individual is informed of the 
content, but not the source* of any information 
developed through a suitability investigation that is 
used in an adverse action against him, e*g.* infor- 
mation used to deny him a particular job. 

Finally, another sticky question concerns the pro- 
priety of maintaining records about public em- 
ployees that may serve legitimately to identify 
potential problems that could be averted by early 
intervention, but that raise serious issues of privacy 
and employee rights. For example, a police officer 
may submit reports or willingly answer questions 
about instances where he used force in carrying out 
his duties. If such reports can be made public, can 
be used to answer citizen complaints, or can serve 
as the basis for a suit against the officer or his 
employer, both the employee and the agency would 
be less inclined to maintain those records in the 
absence of statutory or regulatory requirements. 
Again this situation raises the question of the possi- 
ble need for data concerning certain categories of 
public employees who have special authority that 
would not be appropriate for other types of em- 
ployees in either the public or private sectors. 

Mr. Sheldon Mann, an economist with the 
American Federation of State, County* and Munici- 
pal Empolyers, testified next. He applauded an 
apparently growing recognition, at least by some 
public employers, of the need for legislation to pro- 
tect the employee right of privacy. While acknowl- 
edging that the draft bill under consideration con- 
tained many of the requisite safeguards, the bill 
has serious inadequacies from the standpoint of a 
public employees union. He enumerated four major 
criticisms of the bill* 

1 , In several areas the bill appears to focus on the protec- 
tion of management rights rather than employee rights, 
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eg. the listing of seven purposes for the collection of 
information by management. 

2, Tho meaning and intent of numerous provisions is 
clouded by vague, ambiguous language, e.g. references 
to "adequate" security precautions and "normal per- 
sonnel management organizational channels," 

3, The bill makes no reference to collective bargaining 
agreements and procedures which, along with civil 
service policies and regulations and administrative pro^ 
ceedings* are important components of any process for 
assuring employee rights, Union contracts should con- 
tain employee rights clauses that include provisions for 
an employee and/or his authorized representative to 
have access to his personnel file. Any derogatory in- 
formation included in an employee's record should be 
brought to his attention and he should have ample 
opportunity to respond to and to challenge such 
information, 

4, The draft bill devotes insufficient attention to the 
critical area of the type of information collected and 
maintained about public employees, Only information 
directly relevant to job performance should be recorded* 

In the discussion following Mann's testimony, 
general opposition was expressed to the use of psy- 
chological testing and polygraphs by employers. 
Then the group turned its attention to the appro- 
priate roles of lejpslation, regulation and otter pro- 
cedures, such as collective bargaining, in defining 
employee rights, The regulatory process provides 
more flexibility than does legislation for adjusting 
to changing conditions in many areas; for example, 
in spelling out what information is considered job- 
related and appropriately can be collected. Through 
a rule-making process, proposals concerning the 
kinds of data to be collected and their intended use 
would be published and subject to review and com- 
ment by any interested party. However* reservations 
were expressed about allowing legislative language 
to remain too general in this area; some participants 
felt that some statutory limitations on data collec- 
tion were required to safeguard employee privacy 
adequately. 

A question for Mr, Mann concerning his union's 
position on allowing public access to government 
employee performance evaluations again raised the 
issue of balancing public accountability with the 
privacy rights of these workers. In addition to 
policemen, both teachers and social workers were 



mentioned as employees who by the nature of their 
responsibilities have special authority over others. 
The discussion revolved around the extent to which, 
in either the public or the private sector, accounta- 
bility should rest with the individual employee as 
opposed to the employing organisation and the 
senior officials who have responsibility for its over- 
all performance. 

Most participants believed that government 
employee accountability to the public is greater and 
also, in a sense, qualitatively different from that of 
an employee in the private sector, However, there 
was little support for public disclosure of individual 
performance appraisals and general, but not total, 
agreement that tie responsibility for meeting agency 
obligations should be focused on appointed or 
elected officials who have public visibility. Increased 
citizen participation in governmental affairs can 
contribute to greater responsiveness by public offl- 
cials. 

Another question concerned the problems, in- 
cluding the costs, associated with acquiring em- 
ployee consent for additional uses of data originally 
collected for a specific purpose. One possible ap- 
proach, especially where unionized employees are 
involved, is to channel requests for consent through 
representatives of the employees. 

Harry Douglas, equal employment opportunity 
coordinator for the State of Florida, was then called 
to testify, He endorsed the principles for handling 
personal data addressed in die issue paper and 
largely reflected in the draft bill He noted, how- 
ever, that modification of some provisions of the 
bill would be desirable, particularly in relation to 
existing Florida law and regulations. He discussed 
the State's "sunshine" law, adopted in 1967, which 
requires that meetings of public bodies in the State 
be open, virtually without exception* He also de- 
scribed an older public records law under which 
all public documents, except six kinds specifically 
exempted, are open to scrutiny by any citizen of the 
State. Currently, there is no exemption for person- 
nel records of public employees, although a pending 
amendment to the law seeks to establish some re- 
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ncern has been expressed about the use 
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and a statutory amendment to place some limita- 
tions on dissemination of data is under considera- 
tion. In addition, a Court of Appeals decision, 
relating to the State University system's regulation 
of access to employee records is pending and could 
affect record-keeping practices throughout the 
State personnel system. 

Several specific questions and comments were 
raised in connection with the concept of "open" 
records across-the-board, e,g,; 

If examinations used for competitive placement or 
promotion are disseminated publicity, the development 
and validation of new tests would be very costly. 
An effort to avoid unnecessary or detrimental entries to 
an employees record could lead to a failure to record 
Information that should be in an' adequate personnel 
file. Thus, It Is important to define, as precisely as p©§» 
sible, appropriate job-related information. 

, A centra! and continually ^f^urring issue con- 
cerns determination of the txe*$ tit know in various 
phases of the personnel m ^ nt function. Some 
delineation of the kinck l j counts of informa- 
tion that should be collected and to whom it should 
be available can be made through the legislative and 
rule-making processes; however* there will always 
be requests for data that will have to be handled on 
an individual basis. 

The session ended with apeement among the 
participants that the draft bill considered by the 
group served only as a basis for discussion; it was 
neither endorsed as a model nor appropriately modi- 
fled. Further discussion of privacy issues and an 
exchange of relevant legislative and/or administra- 
tive proposals among public personnel officials and 
others concerned with public employee records is 
clearly needed. The participants recommended spe- 
cifically that a summary of this session, as well as 
notice of any future conferences concerning the pri- 
vacy rights of public employees, be widely distrib- 
uted to State and local government personnel 
officials. 
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STATE AND 
LOCAL 

GOVERNMENT 
DATA BANKS 

Stanley J, Aronoff, State Senator from Ohio, 
served as Chairman of the mock legislative hearings 
on State and Local Government Data Banks, Wit- 
nesses included State Representative William R. 
Bryant, Jr., of Michigan; Assemblyman Mike Cul- 
len, Chairman of the California Assembly Commit- 
tee on Efficiency and Cost Control; Daniel B. Ma- 
graw, Assistant Commissioner of the Minnesota 
Department of Administration; and Marjorie Bill- 
roth, Executive Director of Governors Privacy 
Commission, who substituted for Governor Francis 
W, Sargent of Massachusetts, 

The Committee, composed of a cross section of 
State legislators, other State government officials, 
and representatives of Federal government, local 
government, the private sector and the press, re- 
ceived in advance of the Seminar the issue paper 
reprinted in full below: 
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GENERAL DATA BANK LEGISLATION 
FOR STATE AND LOCAL GOVERNMENT 



Genera! legislation on the personal-data record-keeping 
practices of state and local government agencies can be 
both the starting point and the backbone of a state's efforts 
to construct a comprehensive framework of safeguards for 
personal privacy. Once established in general legislation, 
basic individual rights as well as obligations of government 
record-keeping organizations can be reaffirmed, strength- 
ened, extended, or modified in other statutes and in im- 
plementing regulations, Drafting such legislation, however, 
is not easy. There are no models to follow, and expert 
advice is not only difficult to come by but may vary 
considerably. 

A number of issues and options should be considered 
by sponsors and drafters of general data bank legislation. 
They do not pretend to be prescriptive or to exhaust its 
subject , but hopefully will provide helpful insights and 
suggestions, 

FAIR INFORMATION PRACTICE AND 
PERSONAL PRIVACY 

In drafting any data bank legislation, one should be 
aware that safeguards against record-keeping invasions of 
personal privacy are now widely considered to involve 
much more than prohibiting unauthorized uses and dis- 
closures of personal information. Guaranteeing an in- 
dividual the right to see, copy* and challenge recorded 
information about himself has come to be considered an 
important privacy safeguard equal with the principle that 
an individual's consent should be obtained before using 
information about him for any purpose other than that 
for which it was originally collected. 

The core premise of much recent privacy legislation is 
that policies and practices governing the collection, use, 
and disclosure of personal information should stress ac- 
curacy, judicious use and fairness, and that the best way 
to meet those objectives is to give the individual a signi- 
ficant opportunity to participate in determining what is 
recorded about him and with whom it is shared. Effective 
general legislation, in other words, will seek to assure 
adherence to at least five basic principles of fair informa- 
tion practice: 

I* There must be no personal data record-keeping opera- 
tion whose very existence is secret, 

2, There must be a way for an individual to find out 
what information about him is in a record and how it 
is used. 

3, There must be a way for m individual to prevent in* 
formation about him obtained for one purpose from 
being used or made available for other purposes with- 
out his consent, 

4, There must be a way for an individual to correct or 
amend a record of identifiable information about him- 
self, 
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5, Any organization creating, maintaining, using or dis- 
seminating records of identifiable personal data must 
assure the reliability of the data for the intended use 
and must take reasonable precautions to prevent mis- 
use of the data. 

It will be noted that these principles do not provide the 
basis for determining a priori which data may or may 
not be recorded and used, or why and when. However, 
they do provide a basis for establishing procedures that 
assure individuals, singly or collectively, the right to 
participate In a meaningful way in decisions about what 
goes into records about them and how that information 
will be used, 

INITIAL POLICY DECISIONS 

There are many different ways of assuring adherence to 
fair information practice principles, but the choice of 
means will be influenced to a substantial degree by a 
handful of initial decisions about the structure and cover- 
age of draft legislation, For example, if one opts for a 
central regulatory approach (such as a board or commis- 
sion with broad oversight and rule-making authority), 
details normally dealt with in statutory language may 
sometimes be left to the drafters of implementing regula- 
tions, This approach* however, can be costly (in money, 
personnel, and delayed administrative action) and might 
turn out to be more effective than legislation that, if 
painstakingly drafted, would give record -keeping organiza- 
tions clear guidance on what is expected of them and 
provide individuals with effective civil remedies in the 
event they are injured by an organization's failure to live 
up to its obligations. 

It is important to decide at the outset whether and to 
what extent proposed legislation is to cover any private 
sector organizations, such as government contractors and 
grantees. It appears that any attempt to reach out to the 
private sector in general legislation can present major and 
perhaps debilitating obstacles, particularly where private 
organizations are engaged In interstate transactions, or 
where the legislation makes a violator of any of its re- 
quirements vulnerable to criminal prosecution, or where 
private sector record-keeping organizations are already 
subject to fair credit reporting legislation, 

There also appears to be little reason to distinguish 
between manual (paper or microfilm) records and records 
in computer-accessible form. Wholly automated record- 
keeping systems, i,e„ systems where no paper or microfilm 
record is kept at any point between data collection and 
data use, seem to be extremely rare, and it appears that 
there are no noteworthy differences between manual and 
automated record-keeping policies and practices. 

With regard to statistical-reporting and research records, 
suspending the individual's access, review, and correction 
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rights usually seems sensible and Justifiable. The appro- 
priate protection for such records is immunity from sub- 
poena which assures that they will not be used to make a 
determination about the individual. Moreover, permitting 
an Individual to make changes in a bona fide statistical or 
research record about himself will usually have no prac- 
tical consequence, save to risk that the record will be 
rendered useless for analysis, And further, if individuals 
are guaranteed access to statistical-reporting and research 
records about themselves, all such records must be main- 
tained in a way that makes them easily retrievable in 
individually identifiable form, thereby increasing the risk 
of misuse. 

On the question of individuals v. legal entities, residents 
v, non-residents, and minors and incompetents v* adults 
and legal guardians, guidance will presumably be sought 
in other statutes and in pertinent constitutional provisions 
and court decisions. One approach to the scope question is 
to have the legislation apply to systems of records from 
which information about individuals is retrieved (rather 
than retrievable) by reference to the name, number, or 
some other Identifying feature (such as fingerprints) as- 
sociated with each individual. This would exclude all 
records that are indexed and retrieved only by reference 
to the name of an organization or other legal entity, but 
would probably not exclude sole proprietorships and 
partnerships. Hence, a preliminary study might still need 
to be made of the effect of the proposed legislation on 
existing statutes that mandate public disclosure of certain 
information about individuals engaged in various activities 
that a state regulates or otherwise monitors, 

BASIC REQUIREMENTS 

Most general data bank legislation has at least five 
principle parts: one establishes the individual's right to 
see, copy* review, and challenge a record about himself; 
another imposes certain minimum obligations on record- 
keeping organizations; a third deals with authorized dis- 
closures; a fourth stipulates the permissable exemptions; 
and a fifth establishes civil remedies and criminal penalties. 
Some bills also contain a sixth part establishing a central 
administrative and appeals authority and, in a few cases, a 
central rulemaking authority. 

Each of these principal subdivisions tends to have 
certain recognizable features, even though the exact 
language may differ from bill to bill. Each also has its 
particular drafting pitfalls. The key features of each 
section and some typical policy and drafting dilemmas are 
briefly discussed below: 

Rights of Individuals- Conceptually, mis section may seem 
the least complicated of all. Its principal objectives are to 
guarantee each individual the right to establish that a 
record-keeping organization does in fact maintain a record 
about him; to see and copy it in a form that he can 
understand (i.e., decoded if the record is kept in machine- 



readable form); to challenge the accuracy, relevance, time- 
liness, and completeness of information In such a record; 
and to find out who has had access to it and for what 
purposes. As a drafting matter, however, experience sug- 
gests that it is extremely useful, if not imperative, to keep 
clearly in mind how each of these rights will actually be 
exercised. 

How, for example, does an individual establish that a 
record is being kept about him? Should the individual be 
able to see, copy, and challenge all information in such a 
record— information about his health and psychological 
well-being— information pertaining to others who are also 
named in the record — information provided by a jhird 
party which, if disclosed, would reveal the identity of the 
third party? 

Suppose the individual claims that information in the 
record is inaccurate, outdated, irrelevant, or incomplete. 
Whose judgment should prevail? Who should be required 
to verify what? If the differences cannot be resolved, what 
recourse should the individual have? What about the 
period during which the record is being contested? Should 
the individual be able to insert a statement in the record 
setting forth his version of the facts? How long should 
such a statement be retained? Should it automatically 
follow the record wherever it goes or should its existence 
simply be noted in the record so that a user can request it 
when needed? 

Should the record-keeping organization keep an ac- 
counting of all accesses and disclosures, including those 
to officers and employees of the record-keeping organiza- 
tion who use the records in performing their official duties? 

Not all of these considerations can or should be 
addressed in the statute lest they lock record-system man- 
agers into particular administrative approaches or other- 
wise impede the normal development of imaginative, least- 
cost solutions to the many practical problems that any 
legislation of this sort, no matter how carefully drafted, is 
bound to create. But all of them need to be borne in mind 
in drafting the pertinent provisions. 

On balance, a good drafting approach seems to be to 
reach for statutory language that makes clear the objec- 
tive of each provision and closes as many loopholes as 
can reasonably be anticipated, but also gives those who 
will have to administer the statute as much procedural 
(and for computerized systems, as much design) flexibility 
as possible. This, of course, is the counsel of perfection, 
but the chances that it will at least be approximated seem 
far greater when a general data bank statute is drafted 
with its practical administrative consequences clearly in 
mind. 

Obligations of Record-Keeping Organizations, The usual 
objective here is to assure that each record-keeping organi- 
zation to which the legislation applies assumes a proper 
share of the responsibility for seeing that fair information 
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practice principles arc faithfully observed, Recognizing that 
an individual cannot ask to sea a record that he does not 
know exists, it usually contains one or more notice 
provisions, 

Commonly there is a provision which requires that 
individuals asked to provide information about themselves 
be told why they are being asked, under what legal 
authority, whether they can refuse to answer, what will 
happen 1 if they do refuse, and what uses will be made of 
any information they provide, In this provision, and in 
the general public notice discussed below, the data col- 
lector should be prompted to be as specific as possible in 
describing purposes and anticipated uses, Since simple 
assurances that information will be kept confidential have 
no reliable significance, they should be eschewed in favor 
of statements that identify and, if possible, describe in 
some detail all proposed uses. 

In addition to statements to individuals at the time 
inquiries are made of them, general data bank legislation 
typically requires some form of general public notice that 
attests to the existence of each personal data record- 
keeping system to which the legislation applies, describes 
its principal characteristics, and outlines the steps an 
individual must take? to find out if a record is being kept 
about him, what information it contains, and the pro- 
cedures for challenging its accuracy, relevance, timeliness, 
and completeness. 

Without some form of current and widely disseminated 
general notice, many individuals will not know where and 
how to exercise the rights that the legislation guarantees 
them. 

Other obligations typically imposed on record-keeping 
organizations include a requirement that they issue im- 
plementing regulations (if they are public agencies); keep 
an accounting of all disclosures to outside persons (except 
perhaps to members of the public under public records 
statutes); and maintain their records with such accuracy, 
relevance, timeliness, and completeness as is necessary to 
assure fairness in any decision about an individual made 
on the basis of information contained therein, The rule- 
making requirement can give a record-keeping organiza- 
tion the opportunity to establish reasonable times, places, 
and fees to be charged for making records available to 
individuals who ask to see them, to establish special 
procedures for apprising an individual of medical and 
psychological information in a record about himself, to 
distinguish between the accesses and disclosures for which 
a detailed accounting will be kept and those for which 
some less complicated procedure will be devised, to settle 
on its procedures for dealing with challenge to informa- 
tion in its records and to make such other adjustments as 
it may think necessary to comply fully but intelligently 
with the legislation's basic requirements, 

To expect a record-keeping organization to meet some 
absolute standard of accuracy totally unrelated to the uses 



to which its records are put could well be regarded as an 
irresponsible, and certainly an unduly costly demand. How- 
ever, it is often thought useful to require a record-keeping 
organization to make certain that any information it 
actually uses in making a decision about an individual Is 
as accurate, relevant, timely, and complete as is necessary 
to assure that the information itself does not cause an 
unfair decision to be made. Such a requirement should 
work very well so long as all the users 1 of information in 
a record are subject to the same accuracy-at-point-of-use 
requirement, 

Where it may not suffice, and thus where some addi- 
tional safeguards may be needed, is where information 
from a record is disclosed to some organization or in- 
dividual that is not subject to to the legislation and also 
not able to guarantee that the information will not be used 
irresponsible, 

Conditions of Disclosure. If a State already has a consistent 
and well-executed body of laws governing the transfer and 
disclosure of recorded personal information, it may be 
well-advised to draft general data bank legislation that 
does no more than establish an general notice requirement 
and guarantee individuals the right to see, copy, and 
correct their records. However, if it does seem desirable 
to establish a clearly articulated transfer and disclosure 
policy, a general data bank statute can be the place to 
do it. 

The principle that an individual's consent should be 
obtained before divulging information in a record about 
him is the backbone of a responsible transfer and dis- 
closure policy, Vet if that principle had to be followed 
to the letter in all cases, most government organizations 
and many private ones would not be able to function. 
Clearly one must begin to entertain exceptions the moment 
the individual consent principle is asserted. But for whom 
and under what circumstances? 

Generally, there are three reference points in drafting 
a "conditions of disclosure" section: 

1. Existing so-called "confidentiality" statutes that for- 
bid or otherwise limit certain types of disclosures. 

2. Existing public record statutes that mandate certain 

disclosures, 

3. What one might call the "threshold requirements'* 
to be applied in cases where information transfers 
and disclosures are not covered by an existing statute 
or where existing statutes are being superseded. 

The principal policy issue raised by the first two is 
whether to amend the existing statutes, either by making it 
clear that the disclosure conditions in the general data 
bank legislation are intended to supplant or modify them, 
or to reaffirm them through the insertion of a savings 
clause ("Nothing in this section (or Act) shall be con- 
strued to affect , , ."), The choice will no doubt be made 
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somewhat differently in each state, although the need to 
take account of existing federal requirements (such as the 
confidentiality provisions of the Social Security Act and 
regulations issued thereunder) will produce some uniformi- 
ties. The key point, however, is that the decision to over- 
turn or reaffirm existing law should not be made lightly 
lest a purported "privacy'' statute turn out in practice to 
be a substantial stimulant to the free (i.e., without-eonsent) 
disclosure and circulation of personal information, 

The third reference point, the threshold issue, is equally 
delicate because it involves the establishment of "need to 
know" policies with supporting authorization and docu- 
mentation requmirements. One wants to be sure to provide 
for regular, day-to-day access to records by officers and 
employees of the record-keeping organization who need 
such recess in order to perform (heir official duties, 
Presumably one also does not want to impede unneces- 
sarily the work of statisticians and researchers or to place 
inappropriate constraints on legitimate law enforcement 
access to records. 

Some provision may be needed to cope with emergency 
situations where the best interests of the record subject 
would be served by permitting some outside person to have 
access to a record about him and one can doubtless think 
of other types of without-consent disclosure that will need 
to be provided for, including, perhaps, disclosures that 
facilitate legislative oversight of executive agencies, 

No matter what categorical exceptions to the individual 
consent principle are proposed, how requests for access 
to records aro required to be documented, and what type 
of official assent is required before access to a record can 
be given or information disclosed from it (should the 
head of a government agency be allowed to delegate his 
power to authorize certain disclosures?), there wii) prob- 
ably be a sizeable class of transfers and disclosures for 
which there appears to be no reason to suspend the in- 
dividual consent requirement save the fact that not to do 
so would create an administrative nightmare. Usually 
these are disclosures that take place frequently, involve 
large numbers of records, and are clearly necessary to the 
performance of statutorily authorized government func- 
tions* In these cases, a reasonable solution would seem to 
be to exempt the transferring or disclosing record system 
from the requirement to obtain an individual's explicit 
consent to each such transfer or disclosure of information 
about him, on the condition that he be told of such 
"routine* uses when he is asked to provide information 
about himself and that, in addition, each such use will be 
clearly identified and described in the system's general 
notice. However, if record-keeping organisations are per- 
mitted or required to up-date their public notices periodi- 
cally, some further provision may be needed to assure that 
routine uses are not casually established. 
Exemptions, It is likely that hearings on draft legislation 
will identify fair information practice requirements other 



than the individual-consent-to-disclosure requirement from 
which it may c im advisable tq exempt particular record 
systems ur portions of them* Indeed, it may well be 
decided that whole categories of record-keeping systems, 
such as on criminal justice Information and public em- 
ployee personnel, should be dealt with in separate, specially 
tailored legislation or executive orders, If this is in fact 
decided, a section on general and specific exemptions will 
be necessary and a mechanism will have to be found for 
making them, 

One approach is to provide blanket statutory exemptions 
for certain categories of records, such as those maintained 
by criminal justice agencies, and to allow agency heads to 
exempt other types of records or portions of records from 
specifically enumerated requirements through a public 
rule-making process. Candidates for the latter type of 
discretionary, requirement-specific exemptions may include 
portions of records or record systems where disclosure 
would very likely identify a source to whom confidentiality 
was expressly promised, or where data are required by law 
to be used only for statistical reporting and research. Hie 
key questions to be decided will include whether certain 
types of records or record systems should have an exemp- 
tion at all and, if so, which kind; whether the rule-making 
route to obtaining discretionary exemptions should involve 
a public hearing and an opportunity for court review of the 
final determination; and, most important, from which re- 
quirements exemptions should be permitted. 

The answers to these questions will vary depending on 
the types of records and record systems to be covered by 
the statute and the prevailing state procedures for public 
rule making, 

However, in all cases it should be hoped that the 
exemption procedure would be one that modifies rights or 
permits deviations from organizational obligations only 
when it is clear that some significant individual interest 
will be served or that some paramount societal interest 
can be persuasively demonstrated. 

Remedies. The choice between civil and criminal remedies, 
or some combination thereof, is another that will obviously 
vary from state to state. If civil remedies are preferred, 
however, some will probably press for a liquidated dam- 
ages provision along with the opportunity to recover for 
actual injury. Opinion may also be divided on whether 
record-keeping organizations should be vulnerable to civil 
suits for privacy safeguard violations that do not result in 
actual injury to an individual or for violations that do not 
result from arbitrary, willful, or capricious conduct. Of 
particular importance in fashioning a remedies provision 
will be the continued existence of public records statutes 
that penalize withholding rather than disclosure of per- 
sonal information, Care must be taken to see that con- 
flicting privacy and public information requirements are 
reconciled. 
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The committee received in advance and con- 
sidered four bills as guides: proposed legislatior 
from the States of California, Michigan and Minne- 
sota, as well as the model bill of the National Asso- 
ciation of State Information Systems (NASIS), 
Only the Minnesota bill had been passed into law 
(Minn. Stat 1974 s Sec. 15.162). The committee 
was also advised of pending legislation in Massa- 
chusetts and of an executive order in that State. The 
bills from California, Michipn and NASIS as well 
as an amended version of the Minnesota bill are 
reprinted below: 



CALIFORNIA LEGISLATURE— 1975^76 
REGULAR SESSION 

ASSEMBLY MILL No, ISO 

Introduced by Assemblyman Cullen 

December 4, 1974 
Referred to Committee on Judiciary 

An act to add Title 1.8 (commencing with Section 1798) to 
Part 4 of Division 3 of the Civil Code, relating to 
personal data, and making an appropriation therefor* 

LEGISLATIVE CGUNCtt/S DIGEST 

AB 150, as introduced, Cullen (Jud.). Perianal data. 

While existing law requires that any contract entered 
into by the Department of Finance, any state agency or 
any consolidated data center, concerning data processing 
systems design, programming, documentation; conversion, 
and other aspects of data processing operations shall con- 
tain a provision requiring the contractor and all of bis staff 
working under such contract to maintain all information 
obtained as a result of such contract as confidential and 
not to divulge such information to any other person or 
entity, the existing law contains no genera! safeguards or 
restrictions upon obtaining, using, or disclosing personal 
data contained in information systems or systems of 
records. 

This bill does the following: 

(a) Makes legislative declaration that in view of the 
constitutional right of privacy it is necessary that pro- 
cedures be established to govern disclosure and use of 
records containing information about an individual in 
identifiable form, to afford an individual of the content 
of such records, and to prohibit any recording, disclosure. 



or use of personal information not governed by such 
procedures, 

(b) Prohibits disclosure of personal information con- 
tained in any personally identifiable record except pur- 
suant to a written request by or with prior written consent 
of the individual to whom toe information pertains, with 
specified exceptions, 

(c) Requires persons maintaining such records, among 
other things, to keep an accurate accounting of the date, 
nature and purpose of each disclosure, and the name and 
address of the person, organization, or agency, to whom 
disclosure is made, 

(d) Requires governmental bodies maintaining auto- 
mated personal da ta systems to file annual notice with the 
Secretary of Statu specifying, among other things, the 
nature and purpose of the system and the categories of 
data to be maintained, and the categories of persons on 
whom data are maintained. Provide! civil penalty for 
failure to file required report 

(e) Provides cause of action for damages or for an 
injunction against responsible parties, as specified, for 
noncompliance with Use act 

(f ) Makes it a misdemeanor for an unauthorized per* 
son to use, obtain, or attempt to use or obtain personal 
information subject to the requirements set forth herein; 
and makes it a misdemeanor to knowingly acd willfully 
disclose information in violation hereof, 

(g) Exempts specified record and information systems 
from the prohibitions hereof, including law enforcement 
records, as specified, and certain public records, 

(h) Determines that no relevant evidence relating to 
any procedure established or required by the act is to be 
privileged in any civil action for evidentiary purposes, in- 
cluding discovery procedures or other aspects of any cause 
of action, 

(i) Appropriates an unspecified amount of the State 
Controller for allocation and disbursement to local agen- 
cies for costs incurred by them pursuant hereto. 

Vote: %. Appropriation: yes. Fiscal committee: yes. 
State-mandated local propam: yes. 



The people of the State of California do enact as follows: 

Section l Title LS (commencing with Section 1791) 
is added to Part 4 of Division 3 of tiie Civil Code, to read* 

TITLE IJ CALIFORNIA FAIR INFORMATION 
PRACTICE ACT OF 1975 

CHAPTER 1, GENERAL PROVISIONS 

1798. This act shall be known and may be cited as the 
California Fair Information Practice Act of 1975, 
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1798.1. Recognizing that the right of privacy is a per- 
sonal and fundamental right panted and secured directly 
by the Constitution of the State of California, and that 
the constitutional right of individuals to personal privacy 
is directly affected by the kind of disclosure and use made 
of identifiable information about them in a record, and 
that in order to secure and protect the right to personal 
privacy of individuals under the Constitution and to 
enable them to better obtain the enjoyment of such right 
under Article 1, Section 1, of the Constitution of the 
State of California* it is necessary that [a] a record con- 
taining information about an individual in identifiable form 
must be governed by procedures that afford the data 
subject a right to know what the content of the record is 
or will be* and what disclosure and use will be made of 
the identifiable information in it; and [b] any recording, 
disclosure, or use of personal information not governed 
by such procedures must be prohibited as an unfair in- 
formation practice unless such recording, disclosure, or use 
is specifically authorized by the data subject or by statute. 
It is therefore desirable and appropriate that the Legisla- 
ture provide for such procedures in law because: The right 
to privacy is a personal and fundamental right protected 
by the Constitution of the State of California; the privacy 
of a data subject may be directly affected by the collect 
tion, maintenance, use, and dissemination of personal 
information; the increasing use of computers and sophisti- 
cated information technology, while essential to the efficient 
operations of government and of private industry, has 
greatly magnified the potential for harm to individual 
privacy that can occur from any collection, maintenance, 
use, and dissemination of personal information; the op- 
portunities for an individual to secure employment, in- 
surance, and credit, and his rigjht to due process, and 
other legal protections may be endangered by the misuse 
of certain information; and in order to protect the privacy 
of data subjects identified in information systems, it is 
necessary to establish principles relating to the collection, 
maintenance, use, and dissemination of information by 
such systems. 

Accordingly, the Legislature recognizes basic principles 
of information systems and practices, pertaining to both 
automated and manual systems as follows 

(a) There must be no information systems or system of 
records containing personal information whose very 
existence is secret. 

(b) There must be a way for a data subject to find out 
what personal information about him is in a record and 
how it is used. 

(e) There must be a way for a data subject to prevent 
personal information about him obtained for specified 
purposes from being used or made available for other 
purposes without his consent or knowledge, 

(d) There must be a way for a data subject to correct 



or amend a record containing personal information about 

him, 

(e) Any agency, organization, or individual creating, 
maintaining, using, or disseminating records containing 
personal information must take reasonable precautions to 
ensure the reliability of the data for their intended use and 
to prevent misuse of the data, 

1798.2. As used in this title: 

(a) The term "organization" means, an individual, 
partnership, corporation, association, local public entity, 
the state, or other group, however organized. 

(b) The term "agency 1 * means any office, subdivision, 
branch, division, or arm of government in California, in* 
eluding state government as well as all othen legally con- 
stituted governmental organizations in the State of Call* 
fornia, except the federal government, 

(c) The term "individual** means a natural person, 

(d) The term M reeord B means any collection or group- 
ing of personal information about a data subject that is 
maintained by an organization, agency, or individual and 
that contains his name, or an identifying number, symbol, 
or other identifying particular assigned to the data subject, 

(e) The term "information system* 9 refers to a system 
from which information can be retrieved by the name of 
the data subject* or by some identifying number, symbol, 
or other identifying particular assigned to the data subject 
and includes all processing operations, from initial collec- 
tion of data through all uses of the data, including outputs 
from the system, Data recorded on questionnaires, or 
stored in microfilm archives shall be considered part of a 
data system, 

(f ) The term "system of records** means a group of any 
records under the control of any organization, agency, or 
individual from which information can be retrieved by 
the name of the data subject or by some identifying num- 
ber, symbol, or other identifying particular assigned to 
the data subject, 

(g) The term "statistical research and reporting system** 
means an information system or a system of records 
maintained for statistical research or reporting purposes 
only and not used in whole or in part in making any 
determination about an identifiable individual, 

(h) The term "data subject" means an individual whose 
name or identity is maintained in an information system, a 
system of records, or a statistical research and reporting 
system, 

(i) The term "personal information" includes all data 
that can be associated with identifiable Individuals, and 
[1 j describes anything about an individual, such as identify- 
ing characteristics, measurements, test scores; [2] indicates 
things done by or to an individual, including, but not 
limited to, records of financial transactions, medical treat- 
ment, or other services; or [3] affords a clear basis for 
inferring personal characteristics or things done by or to 
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an individual, including, but not limited to, the mere 
record of his presence in a place, attendance at a meeting, 
or admission to some type of service institution, 

(j) The term Unfair information practice** means a 
failure to comply with the requirements of this act 

(k) The term "maintaining" includes collection, main- 
tenance, or use. 

(1) The term "disclosure" means the act or an instance 
of divulging, revealing, ©r otherwise opening to view, 

(m) The term "disseminate" means to disclose, release, 
transfer, or otherwise communicate information orally, in 
writing, or by electronic or other means, 

(n) The term ''accounting*' means to keep a complete, 
accurate, and up-to-date chronology of disclosures of per- 
sonal information, 

CHAma 2, REQUIREMENTS 

1798.3. No ogranization, agency, or individual shall 
disclose any personally identifiable record or any persona) 
information contained in such record by any means of 
communication to any other organization, agency, or 
individual, except pursuant to a written request by, or 
with the prior written consent of the data subject to 
whom the record or personal information pertains, unless 
disclosure of such information or record is as follows: 

(a) To those officers and employees of the organization 
or agency maintaining the record who have a need for 
such record in the performance of their duties, 

(b) To a recipient who has provided the organization 
or agency with advance adequate written assurance that 
the re cord will be used solely as a statistical research or 
reporting record, and the record is transferred in a form 
that is not individually identifiable. 

(e) To the State Archives of the State ©f California as 
a record which has sufficient historical or other value to 
warrant its continued preservation by the California state 
government, or for evaluation by the Director of General 
Services or the Archives or bis designee to determine 
whether the record has such value, 

(d) To another agency or to an instrumentality of any 
governmental jurisdiction within or under the control of 
the State of California for a law enforcement activity if 
such activity is authorized by law and if the head of such 
agency or instrumentality has made a written request ^ 
the organization or agency which maintains the record, 
specifying the particular portion desired and the law en- 
forcement activity for which the record Is sought. 

(e) Pursuant to a showing of compelling circumstances 
affecting the health or safety of a data subject, if upon 
such disclosure notification is transmitted to the last known 
address of such data subject, 

(f) To federal, state or local government when such 
disclosure is authorized or required by law, 

1798,4, Each organization, agency, or individual, with 



respect to each information system or system of records 
under its control, shall do the following: 

(a) Keep an accurate accounting of the following; 
[1] The date, nature, and purpose of each disclosure of 

a record, or portions of a record containing personal 
information to any other organization, agency, or in- 
dividual made pursuant to Section 1798*3 except sub- 
divisions (a), (b), (c), and (f) of Section 1798.3 or 
disclosures to the public from records which by law or 
regulation are open to public inspection or copying, 

[2] The name and address of the organization, agency, 
or individual to whom such disclosure is made, 

(b) Retain the accounting made pursuant to paragraph 
( I ) for at least three years after the disclosure for which 
such accounting is made, 

(c) Except for disclosures made pursuant to subdivision 
(d) of Section 1798,3 make the accounting made pursuant 
to paragraph (1) available to the data subject named 
therein at his request, 

(d) Inform any organization, agency, or individual 
about any correction, amendment, or notation of dispute 
made by the organization in accordance with subdivision 
(d) of Section 1798,5 of any record that has been dis- 
posed to such organization, agency, or individual, within 
two years preceding the making of such correction or 
amendment of the data subject's record, except that this 
paragraph shall not apply to any record that was dis- 
closed prior to the effective date of this section, 

CHAPTER 3, ACCESS TO RECORDS 

1798*5, iach organization, agency, or individual main- 
taining an information system or a system of records 
containing personal information shall do each of the 

following; 

(a) Permit access by any data subject upon proper 
identification to any record or portion thereof containing 
information pertaining to him which is contained in any 
such system and permit the data subject to review such 
record and have a copy made of all or any portion thereof 
in a form reasonably comprehensible to him. 

(b) Permit such data subject to request correction or 
amendment of a record pertaining to him; and either 

[!j Correct or amend any portion thereof which the 
data subject believes is not accurate, timely, or complete, 
or; 

[2] Promptly inform such data subject of its refusal to 
correct or amend such record in accordance with his 
request, the reason for such refusal, the procedures 
established by the organization, agency, or individual for 
the data subject to request a review of that refusal, and 
the name and business address of the official within the- 
organization or agency to whom the request for review 
may be taken, 

(c) Permit any such data subject who disagrees with 
the organization or agency's refusal to correct or amend 
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his record to request review of such refusal by the official 
named in accordance with subdivision (b) (2); and if, 
after such review, that official also refuses to correct or 
amend the record in accordance with the request, permit 
the data subject to file with the organization or agency a 
concise statement setting forth the reasons for his dis- 
agreement with the refusal, 

(d) In any disclosure containing information about 
which the data subject nas filed a statement of disagree- 
ment occurring after the filing of such statement under 
paragraph (3], clearly note any portion of such in- 
formation which Is disputed, Upon request of either the 
data subject or the recipient of the information, provide 
copies of such statement. If the organization or agency 
deems it appropriate, provide copies of a concise statement 
of the reasons for not making the corrections or amend- 
ments requested* 

1798.6. The organization, agency, or individual may 
charge the data subject a reasonable fee, not the exceed 
five dollars ($5), for making copies of his record, 

1793*7, Each organization, agency, or individual main- 
taining an information system or system of records shall 
inform each data subject whom it asks to supply infor- 
mation, at the time the information is requested of the 
following: - 

(a) The routine or usual recipients or users of the in- 
formation. 

(b) The principal purpose or purposes for which the 
information is intended to be used. 

(c) Other purposes for which the information may be 
used. 

(d) Which statutes or regulations, if any, require dis- 
closure of such information. 

(e) The effects on him, if any, of not providing all or 
any part of the requested information, 

1798.8, Every organization, agency, or individual main- 
taining one or more automated systems containing personal 
information shall give notice of the existence and character 
of each system once each calendar year prior to January 
31 of that calendar year, commencing with the calendar 
year 1977. Such notice shall be filed with the Secretary 
of State, and shall be a permanent public record, The 
secretary may establish regulations prescribing the form of 
such notice to implement this subsection, and may charge 
a filing fee not to exceed five dollars ($5) for each notice 
filed to defray the administrative costs incurred pursuant 
to this section, Any organization, agency, or individual 
maintaining more than one information system or system 
of records containing personal information may file such 
annual notices for each of its systems simultaneously, and 
such notices may be combined as a single riling when ap- 
propriate* In this regard, where a single system is dupli- 
cated or repeated at more than one location* under the 
guidance of a central office, such system may be reported as 



a single system, specifying each location where it is 
operated and where files exist which contain personal in- 
formation, Any organization, agency, or individual pro- 
posing to establish a new information system or system of 
records, or to change the personal information content of 
an existing system, on or after the effective date of this 
subsection, shall file a notice with the secretary within 
ninety (90) days of establishing or changing trie personal 
information content of such system. Notices shell specify 
each of the following: 

(a) The name of the system and the name and address 
of the organization, agency, or individual maintaining the 
system. 

(b) Thi nature and purpose of the system, 

(c) The categories of persons on whom data are or 
are expected to be maintained. 

(d) The categories of data to be maintained, including, 
but not limited to, financial, personal health, education, 
and property data. 

Notwithstanding any other provisions of this title* every 
person who fails to file a notice as required by this section 
shall be liable for a civil penalty not to exceed ten thousand 
dollars ($10,000) for each violation, which shall be as- 
sessed and recovered in a civil action brought in the name 
of the people of the State of California by the Attorney 
General or by any district attorney in any court of com* 
petent jurisdiction. If brought by the Attorney General, 
one-half of the penalty collected shall be paid to the 
treasurer of the county in which the judgment was entered, 
and one-half to the State Treasurer, If brought by a dis- 
trict attorney* the entire amount of the penalty collected 
shall be paid to the treasurer of the county in which the 
judgment was entered, 

1798.9. The organization, agency, or individual main- 
taining an information system or a system of records shall 
take reasonable precaution^ to ensure that personal infor- 
mation is accurate, relevant, timely, and complete, 

CHAPTER 4* CIVIL REMEDIES 

1799. (a) Whenever any organization, agency, or in- 
dividual fails to comply with any provision of this title 
in such a way as to have an adverse effect on a data sub- 
ject, such data subject may bring a civil action against 
such organization, agency, or individual* 

(b) (i) In any suit brought pursuant to the provisions 
of subdivision (a), relating to refusal of access or refusal 
to provide a copy of personal information to a data sub- 
ject, the court may enjoin the organization, agency, or in- 
dividual from withholding the personal information and 
order the production to the complainant of any personal 
information improperly withheld from him, In such a case 
the court shall determine the matter de novo, and may 
examine the personal information in camera to determine 
whether such information or any portion thereof may be 
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withheld, and the burden is on the defendant to sustain 
its action, 

(2 ) The court may assess against the organization, agency, 
or individual reasonable attorney's fees and other litigation 
costs reasonably incurred in any case under this paragraph 
in which the complainant has substantially prevailed, 

(e) In any suit brought pursuant to the provisions of 
subdivision (a) in which the court determines that the 
defendant acted in a manner which was willful, arbitrary, 
or capricious, the defendant shall be liable to the com- 
plain ant in an amount equal to the sum o*> 

(1) Actual damages sustained by the complainant as a 
result of such refusal or failure; and 

(2) The cost of the action together with reasonable 
attorney's fees as determined by the court, 

(d) An action to enforce any liability created under 
this section may be brought in any court of competent 
jurisdiction in the county in which the complainant resides, 
or has his principal place of business, or in which the 
defendant's records are situated, within two years from 
the date on which the cause of action arises! except that 
where a defendant has materially and willfully misre- 
presented any information required under this section to be 
disclosed to a data subject and the information so misre- 
presented is material to the establishment of the defendant's 
liability to that data subject under this section, the action 
may be brought at any time within two years after dis- 
covery by the complainant of the misrepresentation, 

1799.L For the purposes of tiiis title, the parent of any 
minor* or the legal guardian of any individual who has 
been declared to be incompetent due to physical or mental 
incapacity or age by a court of competent jurisdiction, 
may act on behalf of such individual. 

CHAFTEJt 5, CRIMINAL PENALTIES 

1799.1 (a) Any individual who knowingly and willfully 
obtains or uses, or attempts to obtain or use, personal in* 
formation, and who is not authorized to use such infor- 
mation under Section 1798,3 shall be fined not more than 
five thousand dollars ($5,000) or imprisoned not more than 
one year, or both, 

(b) Any individual, or employee of an individual main- 
taining a personal information system, who knowingly and 
willfully provides personal information from the system 
in Violation of this title shall be fined not more than five 
thousand dollars ($5,000) or imprisoned for not more 
than one year, or both. 

CHAPTER 6* GENERAL EXEMPTIONS 

1799,3, (a) The head of any organization or agency 
may exempt any information system or system of records 
under its jurisdiction from any part of this title except 
Section 1798.7, if such system is: 

(1) Maintained by an agency or component thereof 



which performs as its principal function any activity per- 
taining to the enforcement of criminal laws* including 
police efforts to* prevent* control, or reduce crime, or to 
apprehend criminals, the activities of prosecutors, courts, 
correctional, probation, pardon, or parole authorities, and 
which consists of the following: 

[!] Information compiled for the purpose of identifying 
individual criminal offenders or alleged offenders and con- 
sisting only of identifying data and notations of arrests, 
the nature and disposition of criminal charges, sentencing, 
confinement, release, and parole and probation status, 

[ii] Information compiled for the purpose of a criminal 
investigation, including reports of informants and investi- 
gators, and associated with an identifiable individual; or 

[iii] Reports identifiable to an individual compiled at 
any stage of the process of enforcement of the criminal 
laws from arrest or indictment through release from 
supervision, 

CHAPTER 7, STATE ARCHIVAL HE CORDS 

1799,4, (a) Each state agency record which is accepted 
by the Director of General Services for storage, pro- 
cessing, and servicing in accordance with provisions of the 
State Administrative Manual shall for the purposes of this 
section, be considered to be maintained by the state agency 
which deposited the record and shall be subject to the 
provisions of this section. The Director of General Services 
shall not disclose such record, or any information therein, 
except to the agency responsible for the record or pursuant 
to rules established by that agency which are not incon- 
sistent with the provisions of this section. 

(b) Each state agency record pertaining to an individual 
which was transferred to the $tate Archives as a record 
which has sufficient historical or other value to warrant its 
continued preservation by the California state government, 
prior to the effective date of mis section, shall for the pur- 
poses of tliis section, be considered to be maintained by 
the State Archives and shall not be subject to the provisions 
of this section. 

(e) Each state agency record pertaining to an individual 
which is transferred to the State Archives of the State of 
California as a record which has sufficient historical or 
other value to warrant its continued preservation by the 
California state government, on or after the effective date 
of this section, shall, for the purposes of this section, be 
considered to be maintained by the State Archives and 
shall be subject to all provisions of this section except sub- 
division (d) of Section 119% A and subdivision * (b) of 
Section 1798,5 and Section 1798^ 

CHAPTER 8. MlCELLABfEOUS PROVISIONS 

1799,5, (a) No provision of this title shall be construed 
to make confidential any record maintained by the state 
or any local public entity or private organization which 
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by law is not confidential nor to require disclosure of any 
record which by law is confidential* or exempt from dis- 
closure) or the disclosure of which is prohibited by law, 

(b) No relevant evidence, relating to any procedure 
established or required by this act shall be privileged in 
any action for evidentiary purposes including but not 
limited to discovery procedures or other aspects of any 
cause of action. 

Sec, 2. The Intergovernmental Board on Electronic 
Data Processing shall study the effects of this tide and on 
April 1, 1977, and April 1, 1978, transmit a report of its 
findings to a seven-member committee to be composed of 
the State Director of Finance, the Commissioner of Cor- 
porations* the Commissioner of Banking, the Insurance 
Commissioner, and three other members appointed by the 
Governor representing the fields of education, health, and 
criminal justice. This committee shall study the report of 
the Intergovernmental Board on Electronic Data Pro- 
cessing and transmit that report and the committee's find- 
ings and recommendations for further legislation before 
June U 1977, and June U 1978, 

Sic, 3, The sum of — - — ^ dollars ( $ ) 

is hereby appropriated from the General Fund to the 
State Controller for allocation and disbursement to local 
agencies pursuant to Section 2231 of the Revenue and 
Taxation Code to reimburse such agencies for costs in- 
curred by them pursuant to this act. 



MICHIGAN 

DRAFT #2 
SUBSTITUTE FOR 

HOUSE BUI* NO, 5803 

A bill to provide for fair information practices; to create 
a fair information practices board and prescribe its powers 
and duties; to create an advisory council on security and 
privacy of information and prescribe its powers and duties; 
and to prescribe penalties, 

THE PEOPLE OF THE STATE OF 
MICHIGAN ENACT? 

See, 1, This act shall be known and may be cited as the 
"Michigan fair information act"* 
See* 2, As used in this act; 

(a) "Access* 1 means a request for of receipt of infor- 
mation, or an attempted access, 

(b) "Accurate" means complete, clear, and not am- 
biguous, to the extent it will not mislead a reasonable per- 
son about the true nature or import of the information. 

(c) "Agency*' means the state or a department, bureau, 
division, board, commission, authority, state institution of 



higher education, state court! the legislature, or other 
entity that is a part of state government, and includes to 
the extent necessary to carry out this act an entity with 
which an agency shares use of information* 

(d) "Automated" means recorded* in whole or part, on 
magnetic tape* magnetic disk, magnetic drum, punched 
card, optically scannablc paper or film, or otherwise com- 
puter accessible, 

(e) "Board means the fair information practices board 
created in section 7, 

(f) "Chief administrative officer" means the administra- 
tive head of an agency, 

(g) "Correction" means a change in or purge of data 
and includes supplementation, 

(h) "Council" means the advisory council on security 
and privacy of information, 

(j) "Criminal justice agency" means an agency of the 
state or a political subdivision thereof which performs, as 
its principal function, activities relating to: 

(i) Crime prevention, including research or the sponsor- 
ship of research, 

(ii) The apprehension, prosecution, adjudication, or re- 
habilitation of criminal offenders, 

(iii) The use of criminal justice record information, 
(k) "Criminal justice intelligence information" means 

background, incident, or investigative information used 
by a criminal justice agency which is not available to a 
party in a contested case, but does not include criminal 
justice record information or information the use of which 
is specifically prohibited by law, 

(I) "Criminal justice record information* means personal 
information relating to warrants, arrests, pretrial proceed- 
ings, convictions, sentencing, rehabilitation and release, or 
other personal information pertaining to criminal proceed- 
ings or generated as a result thereof, but does not include 
criminal justice intelligence Information, 

(m) "Data subject" means a person who is the subject 
of information used by the state. 

(n) "Information" or "data** means the normal and 
computer art meanings of information and of data, whether 
or not coded, abstracted, personal or nonpersonal, partial 
or complete, whether public record or not, and regardless 
of the manner in which it is used, 

(©) "Information system" means a process, means, or 
method designed or used for the collection, production, 
storage, use, or dissemination of information and includes, 
without limitation, all manual and computerized systems, 

(p) "Person" means an individual, group, association* 
firm, partnership, trust, corporation, or other legal entity, 

(q) "Personal information* 4 means all Information de- 
scribing anything about a person, evidencing things done 
by or to a person, or otherwise affording a basis from 
which it is reasonably possible to identify personal charac- 
teristics or things done by or to a person, 
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(r) l4 Purge f * means to cease using* seal* remove p or 
destroy, 

(s) "Sharing" or "sharing of Information" means allow- 
ing information used by the state to be accessible to a 
local unit of government, another state, or the federal 
government or to any person by contract with the state, 
A fee paid for copies is not a contract with the state for 
this purpose, 

(t) "State" means this state and includes an agency as 
defined in subdivision (c). 

(u) 'Timely information" means information recently 
collected or produced or which, if not recent, remains 
verifiable, reliable* and pertinent Information for the use 
made of It 

(v) "Use" means collection, production* storage, dis- 
semination, or the normal meaning of use, or an attempted 
use. 

Sec, 3, (I) A person maintaining an automated personal 
information or data system in this state or concerning 
residents of this state shall: 

(a) Provide reasonable procedures for a data subject to 
ascertain if a record Is kept containing personal informa- 
tion pertaining to the data subject, 

(b) Allow a data subject, or In the case of a minor or 
a person legally incompetent, his next of kin, parent, or 
guardian, to inspect and obtain at cost, a copy of the in- 
formation. Copies may be so marked or otherwise made 
in a manner which will discourage or prevent improper 
use, 

(c) Provide procedures whereby the data subject may 
challenge the accuracy or timeliness of the information 
and by which inaccurate or untimely information may be 
changed and, if change Is refused* reasonable opportunity 
for the data subject to supplement the Information, 

(d) Advise a person from whom personal information is 
sought whether the person is legally required to provide the 
information and, if not, what result may reasonably be 
expected for failure to provide the information, 

(2) A person maintaining an automated personal in- 
formation or data system subject to this section shall give 
public notice of the existence and character of its system 
at least once before January 31 each calendar year. The 
notice shall be filed with the board. A person maintaining 
more than 1 system shall file annual notices for each of 
its systems, 

(3) A person who proposes to establish a new automated 
personal Information data system subject to this section 
shall file a notice with the board within 30 days of estab- 
lishing the system. The notice shall contain: 

(a) The name of the system and the name and address 
of the person maintaining the system. 

(b) The nature and purpose of the system, 

(c) The categories and approximate number of persons 
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on whom personal information is expected to be maintain- 
ed. 

(d) Categories of information to be maintained which 
will be automated, 

(e) Policies and practices regarding storage, duration of 
retention, and disposal of information, 

(f) The usual categories of Information sources, 

(g) The types of use to be made of information, 

(h) The description of actions taken to comply with 
the requirements of subsection (I), 

(4) This section applies only to personal information 
which is automated. This section shall not apply to a per- 
son regulated under 15 U,S.C, sections 1681 to 1681t 

(5) The board shall encourage compliance with this 
section and recommend to the legislature changes in this 
section or penalties it deems advisable but shall not have 
other powers or duties under this section, 

(6) Section 20 shall not apply to this section and a 
criminal penalty shall not be Imposed solely for violation 
of this section, 

§ec* 4, Sections 5 to 18 and section 20 apply only to 
information used by the state, 

Sec, 5, (1) The state shall not use personal information 
unless the information meets each of the following require- 
ments: 

(a) It is legally obtained, 

(b) There is a valid public purpose for Its use, 

(c) It is timely, 

(d) It is accurate, 

(2) The requirement of subsection (1) shall not apply 
to evidence In a criminal proceeding. 

Sec* 6, (1) This act shall govern the use of information 
by the state, unless otherwise provided herein, 

(2) Criminal justice intelligence information is exempt 
from this act, except that the responsible authority shall 
require nondisclosure agreements of persons with access 
fo criminal justice intelligence information. 

(3) Information used by the state which is not auto= 
mated and is investigatory Information or material com- 
piled or used for regulatory purposes, except to the extent 
available by law to a party to a contested case, is exempt 
from this act, except that the responsible authority shall 
require nondisclosure agreements of persons with access to 
the information or material, - 

(4) Information used by a state court or the legislature, 
exclusively for purposes of internal administration, which 
Is not automated and is not information required to be 
made available for public inspection by section 21 of Act 
No, 306 of the Public Acts of 1965, as amended, being 
section 24.22 1 of the Michigan Compiled Laws, is exempt 
from this act, 

(5) The board, by rule, may exempt from this act or 
specified provisions of this act, except section 5, informa- 
tion used by the state which Is personnel information con- 
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cerning § present employee of the agency, is not auto- 
mated, and is not available to a party in a contested ease, 
Sect 7, (1) The fair information practices board is 
created in the department of management and budget. The 
powers and duties of the board shall include the power 
and duty to supervise and implement this act, 

(2) The board shall be composed of 8 members. Four 
members shall be officers or employees of, or otherwise 
associated with, state government and 4 shall not be as- 
sociated with state government, A member who is an officer 
or employee of state government may designate an author- 
ized representative to serve in his place. This right shall be 
granted by the governor at the time of appointment. Mem- 
bers shall be appointed by the governor with the advice 
and consent of the senate. The members' terms of office 
shall be for 4 years, except that of the members first ap- 
pointed, 4 shall be appointed for 2 years and 4 for 4 
years, respectively. On the expiration of a term, a successor 
shall be appointed. The governor may fill a vacancy for 
an unexpired term, A member may be removed for cause 
by the governor. The members shall receive no compensa- 
tion, but shall be reimbursed for actual and necessary ex- 
penses incurred in the performance of their duties in ac- 
cordance with standard travel regulation? issued by the 
department of management and budget, 

(3) The board shall elect 1 of its members as chairman. 
The term of the chairman shall be 1 year. 

(4) The board shall appoint a staff director, who shall 
be in the classified service, and other personnel authorized 
by law, 

(5) The board shall meet not less than once every 2 
months at a time and place in the state determined by the 
board. The governor, its chairman, or any 3 of its mem- 
bers on 3 days' notice, may call a special meeting at any 
time or place in the state when deemed necessary, A 
majority of the membership of the board constitutes a 
quorum and all decisions of the board shall be by majority 
vote of those present and voting. 

(6) Meetings of the board shall be open to the public, 
except that after the meeting is called to order, the board 
may vote to close a meeting, limiting attendance as it 
deems necessary and appropriate, consistent with the in- 
tent of this act A closing of the meeting shall be by motion 
made and adopted, with a brief statement of the reason 
therefor to be made prior to the vote. The brief statement 
shall be in writing, read aloud by the chairman, 2^d made 
a part of the record of the meeting. 

(7) A record of proceedinp containing substantive per- 
sonal or nonpersonal information may be retained by the 
board, if necessary, but shall be treated in like manner as 
if held by the agency which provided it to the board. 

(8) Records not required by law to be made available 
for public inspection are considered specifically exempt 
from public inspection for purposes of this section. 



Sec, 3* (1) The powers and duties of the board shall 
be broadly construed to allow full implementation of the 
purpose and intent of this act, The powers and duties of 
the board include the following' 

(a) To review and decide appeals of persons relative 
to rights and duties under this act. 

(b) To supervise and enforce this act relating to the 
use of information by the state, 

(c) To conduct inquiries and investigations appropriate 
to carry out its functions^ 

(d) To have access to information used by the state 
for each of its members and its staff as it deems ap- 
propriate. 

(e) To make recommendations concerning fair infor^ 
mat ion practices end to report periodically to the governor, 
legislature, and judiciary. 

(f) To receive and act on the advice of the advisory 
council on security and privacy of information. 

(2) The board may promulgate rules under this act to 
implement its powers and duties, pursuant to Act No. 306 
of the Public Acts of 1969, as amended, being sections 
24.201 to 24.315 of the Michigan Compiled Laws, Rules 
of the board may: 

(a) Establish requirements' and procedures adequate to 
assure that information subject to this act is legally 
obtained, serves a valid public purpose, and is timely and 
accurate. 

(b) Require adequate security for information and 
information systems, including nondisclosure agreements 
when the board deems them necessary or advisable. 

(c) Determine criteria and procedures relative to orders 
to change information and as to sealing, removing and 
destroying information, whether by agency action or order 
of the board, 

(d) Set forth procedures for and limitations on use on 
a need to know basis, 

(e) Establish procedures for notice, access, review, 
change of information, and appeal, consistent with this 

act, 

(f) Establish procedures for and controls and limita- 
tions on the use of information for research and for the 
sharing of information, which may include the prohibi- 
tion thereof, if necessary to carry out the intent of this 
act, 

(g) Provide a data access control plan or manual, or ■ 
both, and education programs relative to proper security 
and privacy practices required by this act and rules 
promulgated under it. 

(h) Require adequate record keeping of use of in- 
formation including, to the extent deemed necessary by 
the board, records as to the source of information. 

Sec, 9, (!) An advisory council on security and privacy 
of information, consisting of 1 1 members to be ap* 
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shall appoint a person to the position 
?acy ombudsman, who shall be in the 
id other personnel authorized by law, 
tall act as liaison to the board, may 
efore the board, and shall be the staff 
ncil. 

i register of types of information eel* 

©red, used, or disseminated, shall be 

tate at each place where a data subject 

le register shall set forth, with respect 

g information: 

id location of the agency, 

i of the information. 

information, 

purpose for and use of the informa- 
nt a person must provide the infor- 
consequenees of failure to provide it, 
>n other than the data subject having 
iformation used by the state shall not: 
permit unauthorised use of the in* 

ifit personally or permit others to 
information which has come to him 
assignment, 

mation or cause it to be removed 
i without authorization. 



(d) Operate or request or permit others to operate 
equipment utilized in the use of inforinatloii without 
authorization. 

(e) Violate a nondisclosure agreement. 

(f) Pail to comply with a valid order of the board, 

(g) Otherwise fail to comply with this act ©r rules 
promulgated hereunder, 

See. 12. (1) The chief administrative officer of an agency 
which uses information subject to this act is the custodian 
of that information, A request for access shall be made to 
the custodian or his authorized representative, 

(2) Wthin the provisions of this act a data subject has 
a right of access to information of which he is the subject 
Access shall include the right to view, take notes, and 
receive copies, if feasible, 

(3) An agency may prescribe reasonable hours, man* 
ners P and places for accesSj and, at the allowance or 
direction of the board, shall impose restrictions reason- 
ably necessary to assure the security and privacy of the 
information and to verify the identity of the person who 
seeks access to the information, The board shall establish 
conditions for and limitations on the use of fingerprinting 
for verification of identity of the person, 

(4) A person who is the subject ©f information used 
by the state and who believes the information is being 
used in violation of section 5 may make sworn application 
to the agency having custody or control of the informa- 
tion* in writing, to correct the information. The applica- 
tion shall include identification as required and the basis 
for the requested correction, If the agency declines or fails 
to act, as requested, within 30 days after the application 
is made, or the person believes a decision or action of the 
agency to be unsatiifactDry, he shall have the right to 
appeal, as set forth in section 1 5, 

(5) An agency shall not charge more than its cost for 
copies made and provided under this section unless other- 
wise provided by law. 

See. 13, (1) Access by a data subject includes the right 
to have an attorney or other person present with him or 
represent him, 

(2) A minor or a person legally incompetent may be 
denied access to records other than public records if 
provision is made for access by a nest of kin, parent, 
guardian, professional, or attorney authorized by a next 
of kin* parent, or guardian. The board, by rule, may 
provide for similar denial of access by persons to health 
and mental health records pertaining to diagnosis, treat- 
ment, or prognosis* 

(3) The board, by rule or on a case by case basis, may 
approve access by other than normally authorized per* 
sonnet a data subject or a person specified in this section 
if the board determines the access desirable to carry out 
this act. Conditions* procedures, controls, and llmiiatioiis 
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may be set by the board, including requiring execution cf 
nondisclosure agreements, 

Sec. 14. An agency, or combinations thereof, way design 
nate a person or group to review requests by a data 
subject for access or change of information* A person 
aggrieved by a decision of the reviewing person or group 
may appeal to the board as provided in section 15* 

Sec. IS, (I) Appeals from actions by an agency of the 
state relating to the performance of its duties tinder this 
act shall be to the board, The appeal shall be in writing, 
sworn to, and shall specify the agency and information in 
question, the data of application to the agency and known 
disposition thereof, the basis for the appeal* and the 
action requested of the board. The board may reject a 
frivolous appeal without hearing. 

(2) Except as provided in subsection (1), the board 
shall order the requested change without a hearing, stipu- 
late in writing with the applicant to an order based on a 
modified request, or conduct a hearing at which the person 
appealing may appear with or without counsel, present 
evidence, and examine and cross-examine witnesses, Pro- 
cedures shall be determined by rules promulgated by the 
board consistent with Act No* 306 of the Public Acts of 
1969, as amended, for hearings in contested cases, The 
board may appoint 1 or more of its members or employees 
to conduct an appeal hearing, Written findings of fact and 
conclusions of law and a pertinent order shall be issued by 
the board within 90 days after receipt of an appeal 
excluding extensions requested by the applicant, On proof 
of a right to correction, the board shall order the in forma* 
tion appropriately corrected. Notification of an ordered 
correction shall be disseminated by the board to agencies 
using the information in question and to the person whose 
information has been ordered corrected. 

Sec* 16* (1) The board may conduct an investigation to 
determine whether a person has violated or is about to 
violate sections 5 to 1$ of this act or a rule promulgated 
thereunder, 

(2) If the board finds that this act or a rule was 
violated, the board may, after notice of at least 4 days by 
personal service or certified mail, hold a hearing to 
determine whether a cease and desist order should issue to 
restrain the action or practice which is in violation of this 
act or the rule, The board may designate t or more of its 
members or employees to conduct the hearings. 

(3) For the purpose of an investigation under this act, 
the board or a member thereof designated by rule of the 
hoard, may administer oaths or affirmations, and on its 
own motion or on request of a party may subpoena wit- 
nesses, compel their attendance* take evidence, and rc- 
qi?!*e the production of matter which is relevant to the 
investigation* including the existence, description, nature, 
custody* condition* and location of any books, documents, 
or other tangible things, and the identity and location of 



persons having knowledge of relevant facts, or any other 
matter reasonably calculated to lead to the discovery of 
materia] evidence, 

<4) Upon failure to obey a subpoena or to answer 
questions propounded by the investigating officer and 
upon reasonable notice to all persons affected thereby, the 
board may apply to the circuit court of the county in 
which the investigation is being conducted or the pro- 
ceeding is being conducted, for an order compelling 
compliance, 

(5) All proceedings under this section shall be in 
accordance with Act No, 306 of the Public Acts of 1969, 
as amended, 

(6) After notice and hearing, the board may order a 
person it finds to be in violation to cease and desist. 

See, 17. A person aggrieved by a final order of the board 
may appeal the order to the circuit court in accordance 
with general court rules and sections 101 to 106 of Act 
No, 306 of the Public Acts of 1969, as amended. 

See, 18, (!) On or after July 1, 1976, a request for public 
record information front the state in order to be allowed 
to obtain a copy of the information shall be by name or 
other personal identifier, unless otherwise approved by 
the board, 

(2) On or after July 1, 1975, information shall not be 
disseminated at a discount cost or charge for volume, nor 
in coinputef-accessible form, nor by blanket order, sub- 
scription, or similar continuing agreement, unless approved 
by the board, 

(3) The board, by rule, consistent with section 21 of 
Act No, 306 of the Public Acts of 1969* as amended, 
may provide that access to personal information used by 
the state* whether or not deemed a public record* may be 
restricted as the board deems necessary and proper to 
restrict or prevent use* by other titan the person who is the 
subject of the information* contrary to the intent of this 
act, 

(4) This section does not apply to use by authorized 
personnel in carrying out their duties for the state. 

See* 19* (1) A person may institute a civil action for 
damages or to restrain a viojatiop of this act In an action 
for damages, a person who wilfully violates this act shall 
he liable, in addition to any liability for actual damages 
as may be proven, for exemplary damages as may be de- 
termined by the court for each wilful violation, together 
with costs and reasonable attorney's fees incurred by the 
person bringing the action. 

(2) A person shall not be subject to civil or criminal 
liability under this act for denial of access to another 
person if the denial is made because the demand is reason- 
ably believed to he part of a pattern of clearly unreason- 
able, repetitive demands for access by or on behalf of the 
other person, 
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Stc, 20* (1) The wilful violation of a provision of this 
act, except as provided in section 3, shall be a misde- 
meanor punishable by imprisonment for not more than 1 
year, or a fine of not more than $I0 p 00O,0Q f or both, 

(2) The violation of a rule promulgated under this act 
shall be a disdemeanor punishable by a fine of not more 
than $500.00. 

Sec, 21. This act shall be construed in a maimer consist- 
ent with the freedom of information provisions of Act Ho, 
306 of the Public .Acts of 1969, as amended. 

See* 22, A person shall not have a defense of sovereign 
immunity against an action brought for violation or 
threatened violation of this act, 

Sec. 23* This act shall become effective July I, 1975, 



MIPJNE30TA STATUTE 

first regular session 

Official Records— Collection, Security 
amd Dissemination 

Chapter 401 
H.F.Ko.1014 

An Act relating to the collection, security end dj&sentljja* 
don of data on individuals by the state and its political 
subdivisions; clarifying necessary definitions; chaoglni 
reporting requirements; restructuring the dudes of re* 
sponsible authorities and the rights of subjects of data; 
providing for Issuance of rules relating to the Impleate a* 
tattoo of the act by the commissioner of administra- 
tion; providing for the establishment *f a privacy 
study voniniission; providing penalties; appropriating 
money; amending Minnesota Statutes t§74 f §edteas 
15,1621 11.1631 15.165; 15.16*; 15.167; and Cb*pttr 
15, by adding sections; repealing Minnesota Statutes 
1974, Sections 15.164 and 15.168. 

Be ii enacted by the Legislature of the State af Minnesota: 
Section 1, Minnesota Statutes 1974, Section 15*162* is 
amended to read: 

15.162 Collection, security and dissemination of fteords? 
definitions 

Subdivision 1. As used in sections 15.162 to 15.168 the 
terms defined in this section have the meanings given 
them, 

Subd, 2. *'Ceminissi©ner" means the commissioner of 
the department of administration, 

Subd* 2a, ^Confidential data on individuals 1 ' means 
data which is riot public but is (a) expressly made con* 
fidential by law as to the Individual subject of that data; 
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lb) collected by a civil or criminal investigative agency as 
part of an active investigation undertaken for the purpose 
of the commencement of a legal action, provided that the 
burden of proof as to whether such investigation is active 
or in anticipation of a legal action is upon the agency; (e) 
data which supplies the basis for the djapiosis of the 
medical or psychiatric condition of an individual as de- 
termined by a licensed physician, 

Subd, 3. ''Data on individuals" includes all records, flies 
and processes which contain any data in which an in- 
dividual is or can be identified and which is kept or in- 
tended to be kept on a permanent or temporary basis. 
It includes that collected, stored, and disseminated by 
manual, mechanical, electronic or any other, means, Data 
on individuals includes data classified as public, private or 
confidential. 

Subd, 4. 'individual" means a natural person, In the 
case of a minor individual under the age of 18, "individual" 
shall mean a parent or guardian acting in a representative 
capacity, except where such minor individual indicates 

otherwise* 

Subdi 5, "Political subdivisi©n* , includes counties* muni- 
cipalities, school districts and any boards, commissions, 
districts or authorities created pureuam to local ordinance, 
It includes any nonprofit corporation which is a com* 
m unity action agency organked to qualify for public 
fundi s or any non-profit social service agency which per- 
forins services under contract to any political subdivision, 
statewide system or state agency, 

Subd, 5 a, "Private data on individuals" means data 
which is not public but which by law is accessible to the 
individual subject of that data, 

Subd, 5b, "Public data on individuals" means data 
which is accessible to the public in accordance with the 
provisions of section 15.17, 

Subd. 6, ''Responsible authority" at the state level means 
any office established by law as the body responsible for 
the collection and use of any set of data on individuals or 
summary data. "Responsible authority* 1 in any political 
subdivision means the person designated by the governing 
board of that political subdivlsiofli unless otherwise pro- 
vided by state law, With respect to statewide systems, 
"responsible authority" me? js trie state official involved, 
or if more than one state officii!, the official desipiated by 
the commissioner, 

Subd. 7, "State ageney" means the state, the university 
of Minnesota, and any office* officer, department, division, 
bureau, board, commission, authority, district or agency of 
the state* 

Subd, 8. "Statewide system** includes any reaerd-keeping 
system in which data on ina /iduals is collected, stored, 
disseminated and used by means of a system common to 
one or more agencies of the state or more than one of its 
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political subdivisions. 

Subd. 9, "Surnmary data" means statistical records and 
reports derived from data on individuals but in which 
individuals are not identified and from which neither their 
identities nor any other characteristic that could uniquely 
identify an individual is ascertainable. 

Sec. 2. Minnesota Statutes 1974* Section 15.163, is 
amended to read: 
15*163 Feporls to the legislature 

Subdivision 1. On or before August 1 of each year the 
responsible authority shall document and hie a report 
with the commissioner of administration* which shall be a 
public record. The report shall contain the following in- 
formation! 

(a) The title, name, and address, of the responsible 
authority. 

(b) A statement of which records containing data on 
individuals maintained by the responsible authority are 
classified as confidential and which are classified as private, 
The responsible authority shall submit sample copies of 
any forms which will, when executed, contain data on 
individuals classified as private or confidential, 

(c) The purposes for which private or confidential data 
on individuals is authorized to be used, collected, dis- 
seminated and stored. 

(d) The responsible authority's policies and practices 
regarding storage, duration of retention, and disposal of 
data on individuals* including a description of the pro- 
visions for maintaining the integrity of private and eon- 
fidental data on individuals. 

Subd, 2. On or before December 1 of each year* the 
commissioner shall prepare a report to the legislature 
summarizing the information filed by responsible authori- 
ties pursuant to subdivision 1 and notifying the legislature 
of any problems relating to the administration, imple- 
mentation and enforcement of sections 15.162 to 1.1168 
which might, in his opinion, require legislative action, 

Sec, 3. Minnesota Statutes 1974, Chapter 15, is amended 
by adding a section to read" 
I 54 64 1 Duties of responsible authority 

(a) Data on individuals is under the jurisdiction of the 
responsible authority who may appoint an individual to 
be in charge of each file or system containing data on 
individuals, 

(b) Collection and storage of public, private or con- 
fidential data on individuals and use and dissemination of 
private and confidential data on individuals shall be limited 
to that necessary for the administration and management 
of programs specifically authorized by the Isjpslature, local 
governing body or mandated by the federal government, 

(c) Private or confidential data on individuals shall not 
he used, collected, stored or disseminated for any purposes 
other than those stated to an individual at the time of 



collection in accordance with section 15*165 of, in the 
case of data collected prior to August I, 1975* for any 
purpose other than those originally authorized by law, 
unless (1) the responsible authority flies a statement with 
the commissioner describing the purpose and necessity of 
the purpose with regard to the health, safety or welfare of 
the public and the purpose is approved by the commis- 
sioner, or (2) the purpose is subsequently authorized by 
the state or federal legislature, or (3) the purpose is 
one to which the individual subject or subjects of the data 
have given their informed consent. 

(d) The use of summary data derived from private or 
confidential data on individuals under jurisdiction of one 
or more responsible authorities shall be permitted, pro- 
vided that summary data is public pursuant to section 
15,17. The responsible authority shall prepare summary 
data from private or confidential data on individuals upon 
the request of any person* provided that the request is in 
writing and the cost of preparing the data is borne by the 
requesting person, The responsible authority may delegate 
the power to prepare summary data to the administrative 
officer responsible for any central repository of summary 
data, or to a person outside of its agency if the person 
agrees in writing not to disclose private or confidential data 
on individuals, 

(e) The responsible authority shall establish procedures 
and safeguards to ensure that all public, private or con- 
fidential data on individuals is accurate, complete and 
current. Emphasis shall be placed on the data security 
requirements of computerized flies containing private or 
confidential data on individuals which are accessible 
directly via telecommunications technology, including 
security during transmission, 

See. 4, Minnesota Statutes 1974, Section 15.165, is 
amended to read: 
1 5.1 65 Rights of subjects of data 

The rights of individuals on whom the data is stored or 
to be stored shall be as follows: 

(a) An individual asked to supply private or con- 
fidential data concerning himself shall be informed of: 
( I ) both the purpose and intended use of the requested 
data, (2) whether he may refuse or is legally required to 
supply the requested data, and (3 ) any known consequence 
arising from his supplying or refusing to supply private or 
confidential data, 

(b) Upon request to a responsible authority, an in- 
dividual shall be informed whether he is the subject of 
stored data on individuals, whether it be classified as 
public, private of confidentiaL Upon his further request, 
an individual who is the subject of stored public or private 
data on individuals shall be shown the data without any 
charge to him and, if he desires, informed of the content 
and meaning of that data, After an individual has been 
shown the data and informed of its meaning, the data 
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need not be disclosed to him for six months thereafter 
unless a dispute or action pursuant to this section is 
pending or additional data on the individual has been 
collected. The responsible authority shall provide copies 
of the data upon request by the individual subject of the 
data, provided that the cost of providing copies is borne 
by the requesting individual* 

(e) An individual may contest the accuracy or com- 
pleteness of public or private data concerning himself. To 
exercise this right, en individual shall notify in writing the 
respOnsble authority describing the nature of the dis- 
agreement. The responsible authority shall within 30 days 
correct the data if the data is found to be inaccurate or 
incomplete and attempt to notify past recipients of in* 
accurate or incomplete data, or notify the individual of 
disagreement. Data in dispute shall not be disclosed except 
under conditions off demonstrated need and then only if 
the individual's statement of disagreement is included with 
the disclosed data. The determination of the responsible 
authority is appealable in accordance with the provisions 
of the administrative procedure act 3 relating to contested 
cases. 

Sec, 5. Minnesota Statutes 1974, Section 15,166. is 
amended to read: 

11*166 Civil penalties 

Subdivision 1, Notwithstanding section 466.03, a political 
subdivision, responsible authority or state agency which 
violates any prevision of sections 15. 162 to 15.168 is liable 
to a person who suffers any damage as a result of the 
violation* and the person damaged may bring an action 
against the political subdivision, responsible authority or 
state agency to cover any damages sustained* plus costs 
and reasonable attorney fees. In the case of a willful viola- 
tion, the political subdivision or state agency shall, in 
addition, be liable to exemplary damages of not less than 
$100, nor more) than $1,000 for each violation, The state 
is deemed to have waived any immunity to a cause of 
action brought under sections 15.162 to 15.168. 

Subd. 2, A political subdivision, responsible authority or 
state agency which violates or proposes to violate sections 
15,162 to 15.1*8 may be enjoined by the district court. 
The court may make any order or judgment as may be 
necessary to prevent tha use or employment by any person 
of any practices which violate sections 15,162 to 15.168. 

Subd. 3, An actioni filed pursuant to this section may be 
commenced in the cyunty in which the individual alleging 
damage or seeking relief resides, or In the county wherein 
the political subdivision cxi$n nt in the case of the state, 
any county, 

Sec, 6. Minnesota Statutes 1974, Section 15.167, is 
amended to read: 



a Strifes 13,0424 a atq, 



10,167 Penalties 

Any person who willfully violates the provisions of 
sections 15.162 to 15,168 or any lawful rules and regular 
Hons promulgated thereunder is guilty of a misdemeanor. 
Willful violation of sections 15.162 to 15.168 by any 
public employee constitutes just cause for suspension with- 
out pay or dismissal of the public employee. 

Sec, 7. Minnesota Statutes 1974, Chapter 15, is amended 
by adding a section to read: 
15.1671 Duties of the commissioner 

The commissioner shall with the advice of the inter- 
governmental information services advisory council pro- 
mulgate rules, in accordance with the rule-making pro- 
cedures in the administrative procedures' act which shall 
apply to state agencies, statewide systems and political 
subdivisions to implement the enforcement and adminis- 
aration of sections 15.162 to 15,169. The rules shall not 
affect section 15.165, relating to rights of subjects of data, 
and section 15,169, relating to the powers and duties of 
the privacy study commission, Prior to the adoption of 
rules authorized by this section the commissioner shall 
live notice to all state agencies and political subdivisions in 
the same manner and in addition to other parties as re- 
quired by section 15.0412, subdivision 3, of the date and 
place of hearing, enclosing a copy of the rules and regula- 
tions to he adopted. 

See. S, Minnesota Statutes 1974, Chapter 15, is 
amended by adding a section to read: 
11*15!? Privacy study commission 

SuWiviiloB 1* Establishment There is hereby created 
a privacy study commission consisting of six members, 
three of whom shall be appointed by the committee on 
committees, and three of whom shall be appointed by the 
speaker of the house, The commission shall act from the 
time its members are appointed until the commencement 
of the 1977 regular session of the legislature. Any vacancy 
shall be filled by the appointing power, 

Subd, 2* Organization and procedure. At its first meet* 
ing the? commission shall elect a chairman, a vice-chairman 
and such other officers from its membership as it may 
deem necessary. The commission shall adopt rules govern- 
ing its operation and the conduct o! its meetings and 
hearings, which rules are not subject to the provisions of 
the administrative procedures act. 

Subd, J, Duties and powers. The commission shall 
mate a continuing study and investigation of data on 
Individuals collected, stored, used and disseminated by 
political subdivisions, state agencies, statewide systems and 
any other public or private entity in the state of Minnesota 
the commission may deem appropriate for such study and 
investigation. The powers and duties of the commission 
shall include, but are not limited to the following: 

(I) the holding of meetings at times and places it 
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designates to accomplish the purposes set forth In Laws 
1975, Chapter 401, The commission may hold hearinp at 
times and places convenient for the purpose of taking 
evidence and testimony to effectuate the purposes of Laws 
1975, Chapter 40 1» and for those purposes the commission 
may* through its chairman by a three-fourths vote of its 
members* issue subpoenas, including subpoenas duces 
tecum, requiring the appearance of persons, production of 
relevant records and the giving of relevant testimony, In 
the case of contumacy or refusal to obey a subpoena issued 
under authority herein provided, the district court in the 
county where the refusal or contumacy occurred may, 
upon complaint of the commission, punish as for contempt 
the person guilty thereof, 

(2) the study of all data on individuals collected, stored, 
used or disseminated in the state of Minnesota including, 
but not limited to that collected, stored, used or dissemi- 
nated by any political subdivision, state agency or state- 
wide system in order to determine the standards and 
procedures in force for the protection of private and 
confidential 'data on individuals. In conducting such study, 
the commission shall : 

(a) determine what executive orders, attorney general 
opinions, regulations, laws or judicial decisions govern the 
activities under study and the extent to which they are 
consistent with the rights of public access to data on in- 
dividuals, privacy, due process of law and other guarantees 
in the Constitution. 

<b> determine to what extent the collection, storage, use 
or dissemination of data on individuals is affected by the 
requirements of federal law, 

<c> examine the standards and criteria governing pro- 
grams, policies and practices relating to the collection, 
storage, use or dissemination of data on individuals in the 
state of Minnesota, 

(d) collect and utilize to the maximum extent prac- 
ticable, all findings, reports* studies, hearing transcripts, 
and recommendations of governmental legislature, and 
private bodies, institutions, organizations and individuals 
which pertain to the problems under study by the com- 
mission. 

(3) the recommendation to the legislature of the ex- 
tent, if any, to which the requirements and principles of 
this act should be applied to information practices in 
existence in the state of Minnesota by legislation, ad- 
ministrative action or voluntary adoption of such require- 
ments and principles, and report on such- other legislative 
recommendations as it may -determine to be necessary to 
protect the privacy of individuals while meeting the legiti- 
mate needs of government and society for information. 

Sabd, 4- Office* The commission shall maintain an 
office in the eapitol group of buildings in space provided 
by the commissioner of administration, 

Sobd. 3, Supplies; staff. The commission may purchase 



equipment antf applies and employ such professional, 
clerical, and technical assistants from the senate and house 
staff as it deems necessary in order to perform the duties 
herein prescribed, The commission may invite consultants 
and other knowledgeable persons to appear before it and 
offer testimony and compensate them appropriately, 

Suhd. 6. Assistance of other agencies. The commission 
may request any information including any data on in- 
dividuals from any political subdivision, statewide system, 
or ftate agency or any employee thereof in order to assist 
in carrying out the purposes of the act, and notwithstand- 
ing any law to the contrary, such employee or agency is 
authorized and directed to promptly furnish any such data 
or information requested, 

$ubd» 7. Expense, reimbiiminfni* Members of the 
commission shall be compensated as provided in Minne- 
sota Statutes, Section 3*102. 

Subd, §, Penalties for disclosure, (!) Any member, 
assistant or staff of the commission who, by virtue of his 
employment or official position, has possession of, or 
access to, agency records which contain private or con- 
fidential data on individuals the disclosure of which is 
prohibited by law, and also knowing or having reason to 
know that disclosure, of such data is prohibited, willfully 
discloses such data in any manner to any person or agency 
not entitled to receive it shall be guilty of a misdemeanor, 

(2) Any member, assistant or staff of the commission 
who knowingly and willfully requests or obtains any 
private or confidential data on individuals under false 
pretenses the disclosure of which such person is not 
entitled by law shall be guilty of a misdemeanor, 

Subd, 9* Report to the legislature. The commission 
shall report its findings and recommendations to the legis* 
lature as soon as they are available, in any case not later 
than November 15, 1976, and may supplement them mere- 
after until January 15, 1977, One copy of the report shall 
be riled with the secretary of the senate, one copy with 
the chief clerk of the house of representativs and ten copies 
with the legislative reference library, # 

Subd, 10* Appropriation. There Is appropriated from 
the general fund the sum of $25,000 for the biennium 
ending June 30, 1977, or as much thereof as necessary, to 
pay the expenses incurred by the commission. Expenses of 
the commission shall be approved by the chairman or 
another member as the rules of the commission provide 
and paid in the same manner that other state expenses are 
paid, 

Sec, 9, Minnesota Statutes 1974, Sections 15,164 and 
15,168, are repealed, 

Sec, 10, This act is effective the day following final 
enactment, 

Approved June 5, 1975. 
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NATIONAL ASSOCIATION OF STATE 
INFORMATION SYSTEMS 

Suggested Guidelines for 

a State Information Practices Act 

An Act to protect a person's right to privacy and con* 
fidenfiality and to prohibit the unreasonable acquisition, 
use and retention of such information by state and local 
governments, 

(Enactment Clause, as required by state law) 
SECTION 1. Short Title, This Act shall be known and 
may be cited as the 'information Practices Act". 
SECTION 2, Legib ative Intent, 
(a) The (name of legislative body) rinds and declares: 

(i) That the use of information for purposes 
other than those purposes to which a person 
knowingly consents can seriously endanger a 
person's right to privacy and confidentiality, 

(ii) That information collection methods are not 
limited to political boundaries and, therefore* 
it is necessary to establish a unified statewide 
program for the regulation of information col- 
lection practices and to cooperate fully with 
other states and with agencies of the govern- 
ment of the United States in regulating such 
information collection practices, 

<iii) That in order to increase participation of 
persons in the prevention and correction of 
unfair information practices, opportunity for 
hearing and remedies must be provided. 
<iv) That in order to insure that information 
collected, stored and disseminated about per- 
sons is consistent with fair information prac- 
tices while safe-guarding the interests of the 
persons and allowing the state to exercise its 
proper powers* a definition of rights and re- 
sponsibilities must be established. 
(b> It is the purpose of this act to establish fair in- 
formation practices to insure that the rights of persons are 
protected and that proper remedies are established to pre- 
vent abuse of personal information, 

SECTION 3. Definitions, As used by this act, unless 
the context otherwise requires* the following words and 
phrases shall have the meaning ascribed to them in this 
section; 

(a) *\Act" is the (name of state) Information Practices 
Act* 

(b) "Board" is the (name of state) Information Prac- 
tices Board created by this act (or if there is no board as 
ill Option 5 infra* (b) shall read "Authority" is the (name 
of state) Information Practices Authority created by this 
Act, 



(c) "Individual" is any man* woman, or child. 

(d) "Person" is any individual; partnership* co-partner^ 
ship* firm* company* corporation, association* joint stock 
company, trust, estate* political subdivision* state agency, 
or any other legal entity* or their legal representatives or 
agent, 

(e) "Personal information" is any information that by 
some specific means of identification, Including but not 
limited to any name, number, description, and including 
any combination of such characters* it is possible to 
identify with reasonable certainty the person to whom such 
information pertains, 

(f) "Personal information system" is any method by 
which personal information is collected* stored, or dis- 
seminated by any agency of this state government, or, by 
any local government or other political subdivision of this 
State, 

(g) "Responsible authority" at the State level means 
any office established by law as the body responsible for 
the collection and use of any set of data on persons or 
summary data, "Responsible authority** in any political 
subdivision means the person designated by the governing 
body (authority) of that political subdivision* unless other- 
wise provided by state law. With respect to statewide 
systems, those involving one or more state agencies and 
one or more political subdivisions, "responsible authority*' 
means the state official involved* or if more than one state 
official, the state official designated by the board. 

(h) "File" is the point of collection of personal identi- 
fiable information, 

(i) "Purge* 1 is the physical destruction of files, records, 
or information, 

(i) "Need to know" is the necessity of the person who 
wishes to collect* store* or disseminate personal informa- 
tion for obtaining the specific information, 

(k) "Local government 1 * (the appropriate definition for 
the purposes of this act in this state), 

(I) "Political subdivision" (appropriate definition for 
the purposes of this act in this state), 

(m) "Machine-accessible" means recorded on magnetic 
tape* magnetic disk* magnetic drum, punched card* optical- 
ly scannable paper or film, punched paper tape, or any 
other medium by means of which information can be 
comm undated to data processing machines, 

SECTION 4. (Name of state) Information Practices 
Board. 

(Op*ion 1 — Independent Board): 

(a) There is established in the executive branch of this • 
state government an agency to be known as Information 
Practices Board, The Board shall be composed of nine 
persons who shall be appointed by the Governor with the 
advice and consent of (name of legislative body charged 
with confirmation of Governor's appointments). One such 
person shall have been actively engaged in the management 
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of information and record keeping systems in this State 
government, one such person shall have been actively en- 
gaged in information processing and record keeping sys- 
tems in local government in this state, one such person 
shall have been actively engaged in information processing 
and record keeping systems in criminal justice or law en- 
forcement, and six of such persons, at least 2 of whom 
shall represent the general public, shall not be representa- 
tive of any of the aforementioned activities, Initially, three 
of such persons shall be appointed to serve until (term 
desired for staggering); three of such persons shall be ap- 
pointed to serve until (term desired for staggering); and 
three of such persons shall be appointed to serve until 
(term desired for staggering). As terms of appointment 
expire, successors shall be appointed for terms to expire 
(desired length of term) years thereafter except all mem- 
bers of the Board shall serve until their respective suc- 
cessors are appointed and qualified. The Governor shall 
fill any vacancy by the appointment of a member for the 
unexpired term of such member in the same manner as in 
the making of original appointments. 

(b) The Board may appoint a Director who shall serve 
at the pleasure of the Board, and such other employees as 
are necessary to carry out the purposes of this act. The 
Board may secure by agreement such services as it may 
deem necessary from any other department agency or 
unit of state government, and may employ and compensate 
whatever consultants and technical assistants may be re- 
quired. It is the policy of the legislature that the Board 
shall use existing state capability insofar as practicable. 

(c) The Board shall meet at least once every three 
months, and each member of the Board shall be entitled 
to reimbursement for actual and necessary expenses in- 
curred in the performance of his duties. 

(Option 2— Board within Existing State Department): 
(a) There is established within the Department of 
Administration (or other appropriate state agency) an In- 
formation Practices Board. 

Board shall be composed of nine persons who shall be 
appointed by the Governor with the advice and consent 
of (name of legislative body charged with confirmation of 
Governor's appointments). One such person shall have 
been actively engaged in the management of information 
and record keeping systems in this State government* one 
such person shall have been actively engaged in informa- 
tion processing and record keeping systems in local govern- 
ment in this state, one such person shall have been actively 
engaged in information processing and record keeping sys- 
tems in criminal justice or law enforcement, and six of 
such persons, at least, 2 of whom shall represent the 
general public, shall not be representative of any of the 
aforementioned activities, Initially, three of such persons 
shall be appointed to serve until (term desired for stagger- 
ing); and three of such persons shall be appointed to 



serve until (term desired for staggering)* As terms of ap» 
pointment expire, successors shall be appointed for terms 
to expire (desired length of term) years thereafter ex- 
cept all members of the Board shall serve until their 
respective successors are appointed and qualified, The 
Goverrior shall fill any vacancy by the appointment of a 
member for the unexpired term of such member in the 
same manner as in the making of original appointments, 

(b) The Board may appoint a Director who shall be 
an official of the Department of Administration (or other 
appropriate state agency) . The Board may secure from the 
Department of Administration (or other appropriate 
agency) such services as it may deem necessary, 

(c) The Board shall meet at least once every three 
months, and each member of the Board shall be entitled 
to reimbursement for actual and necessary expenses in- 
curred in the performance of his duties. 

(Option 3 — fix Officio Board) 

(a) There is established an Information Practices Board, 
The Board shall be composed of (Opg., the Governor, the 
Attorney General* the Chief Justice of the Supreme Court, 
the President of the Senate, the Speaker of the House, or 
their designees) serving ex officio. 

(b) The Board may appoint a Director who shall be an 
official of the Department of Administration (or other 
appropriate state agency), The Board may secure from 
the Department of Administration (or other appropriate 
agency) such services as it may deem necessary, 

(c) The Board shall meet at least once every three 
months, and each member of the Board shall be entitled to 
reimbursement for actual and necessary expenses incurred 
in the performance of his duties, 

(Option 4 — No Board)' 

(a) There is established an Information Practices Au* 
thority which shall be the Director of the Department of 
Administration (or other appropriate state official) serving 
ex officio. 

(b) Intentionally deleted. 

(c) Intentionally deleted. 
End of Options 

(d) The Board (Authority) shall collect and disseminate 
such Information and acquire such technical data as may 
be required to carry out the purposes of this Act, includ- 
ing ascertainment of the routine practices and security pro- 
cedures of personal information systems in the collection, 
storage or dissemination of personal information, 

(e) The Board (Authority) may require the submission 
of complete outlines or plans of personal information 
systems from responsible authorities and the submission of 
such reports regarding known or alleged violations of the 
Act or of regulations thereunder, as may be necessary for 
purposes of this act, 

(f) The Board (Authority) shall prescribe a program 
of continuing and regular inspection of personal informa- 
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tion systems in order to assure that information practices 
are in compliance with this Act and regulations adopted 
thereunder. 

(g) The Board (Authority) shall investigate alleged 
violations of this Act or of regulations adopted thereunder, 

(h) The Board (Authority), pursuant to procedures (of 
this Act or Administrative Procedures Act), shall adopt 
regulations to promote security, confidentially and privacy 
in personal information systems, consistent with the pur- 
pose of this Act, Without limiting the generality of this 
authority, such regulation shall prescribe: 

(1) limits of authority and responsibility for all per- 
sons with access to personal information systems or 
any part thereof; 

(2) methods for obtaining advice and opinions with 
regard to requirements of law in the regulating of 
security, confidentiality and privacy in personal in- 
formation systems; 

(3) policies and procedures to insure the security of 
personal information systems including the mechan- 
ics, personnel, processing of information, site design 
and access* 

(4) standards, over and above those required by normal 
civil service, of conduct* employment and discipline 
for reiponsible authorities and all other persons 
with access to personal information systems or any 
part thereof; 

(5) standards for the need to know to be utilized by 
responsible authorities in determining what types 
of information ma* be collected, stored and dis- 
seminated; 

(6) standards fcr direct ana indirect access to personal 
information systems; 

(7) standards and procedures to assure the prompt and 
complete purging of personal information from per* 
sonal information systems; 

(§) a continuing program of external and internal audit- 
ing and verification to assure the accuracy and com- 
pleteness of personal information; 

(9) standards governing interagency use of files as long 
as such use is not in violation of other statutory re- 
quirements, this Act or regulations adopted there- 
under. 

(10) standards for exempting certain files from the cover- 
age of this act such as telephone number lists, mail- 
ing lists, etc* intended for normal office use. 
(i> The Board (Authority) shall have the duty to re- 
present the State of (name of state) in any and all matters 
pertaining to plans* procedures or negotiations for inter- 
state compacts or other governmental arrangements re- 
lating to the regulations of personal information systems 
or otherwise relating to the protection of the person*! 
right of privacy, 

(j) Th% Board (Authority) shall have the authority to 



accept, receive and administer on behalf of the State any 
grants, gifts, loans or other funds made available to the 
State from any source for purposes of this Act or other 
related privacy protection activities, surveys or programs, 
subject to the several statutes and procedures of (name 
of state). 

(k) On or before December 1 (or other desired date) 
of each year the Board shall prepare a report, or update 
of the previous year's report, to the lepslature and go- 
vernor, Summaries of the report be available to the public 
at a nominal cost. The report shall contain to the extent 
feasible at least the following information: 

( 1 ) a complete listing of all personal information sys- 
tems w^iieh are kept by the state and its political 
subdivisions, a description of the information con- 
tained therein, and the reason that the information 
is kept; 

(2) a statement of which types of personal information 
in the Board's opinion, are public records as de- 
fined by (name of state) Statutes, which types of 
information are confidential and which tyr&s of in- 
formation are neither; 

(3) the title, name, and address of the responsible 
authority for the system and for each file and 
associated procedures; 

(i) the categories and number of persons in each 
category on whom information is or is ex- 
pected to be maintained, 

(ii) the categories of information maintained, of 
to be maintained, indicating which categories 
are or will be stored in machine-accessible 
files, 

(iii) the categories of information sources, 

(iv) a description of all types of use made of 
information* indicating Chose Involving ma- 
chine-accessible files, and including all classes 
of users, 

(v) the responsible authority's and the Board's 
policies and practices regarding information 
storage, duration of retention of information, 
and disposal thereof, 

(vi) a description of the provisions for maintain- 
ing the integrity of the information pursuant 
to this Act and the regulations adopted there- 
under, and 

(vii) the procedures pursuant to this Act and the 
regulations adopted thereunder whereby a 
person can (a) be informed if he is the sub- 
ject of information in the system, (b) gain 
access to the information, and (c) contest its 
accuracy, completeness, pertinence, and the 
necessity for retaining it; and 

(4) any recommendations concerning appropriate legis* 
lation, 
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(Section (1) and (m) are not required if the state has an 
Administrative Procedures Act,) 

(1) The Board (Authority) may adopt such procedural 
rules as may be necessary to accomplish the purposes of 
this Act, Notice of the proposed adoption of procedural 
rules shall be given in accord with subsection (m) of this 
section 4, and any person may submit written statements 
regarding such proposals, 

(m) The Board (Authority) shall consider written pro- 
posals for the adoption* amendment or repeal of Board 
(Authority) regulations presented by any person, and the 
Board (Authority) may make such proposals on its own 
motion, If the Board (Authority) finds that any such pro- 
posal is supported by an adequate statement of reasons, is 
accompanied by a petition signed by at least 500 persons, 
is not plainly devoid of merit and does not deal with a 
subject en which a hearing has been held within the pre- 
ceding six months, the Board shall schedule a public hear- 
ing for consideration of the proposal, If such proposal is 
made at the Board's (Authority's) discretion, the Board 
(Authority) shall schedule a public hearing without re- 
gard to the above conditions. 

No substitute regulations shall be adopted, amended or 
repealed until after a public hearing has been held within 
the State, At least 20 days prior to the scheduled date 
of the hearing the Board (Authority) shall give notice of 
mzh hearing by public advertisement in three newspapers 
of general circulation in the State of the date, time, place, 
and purpose of such hearings give written notice to any 
person in the Slate concerned who has in writing requested 
notice of public hearinp; and make available to any per- 
son on request copies of the proposed regulations, together 
with summaries of the reasons supporting their adoption. 

Any public hearing relating to the adoption, amendment, 
or repeal of Board (Authority) regulations under this 
subsection shall be held before a qualified Hearing Officer 
appointed by the Board (Authority). All such hearings 
shall be open to the public, and reasonable opportunity to 
be heard with respect to the subject of the hearing shall be 
recorded stenographieally, The transcript so recorded, and 
any written submissions to the Hearing Officer in relation 
to such hearings shall be open to public inspection, and 
copies thereof shall be made available to any person upon 
payment of the actual cost of reproduction ©f the original 
After such hearing, the Hearing Officer shall make 
recommendations to the Board (Authority) concerning 
the proposed regulations and the Officer's own suggested 
revisions. The Board (Authority) may revise the proposed 
regulations before adoption in response to suggestions 
made at the hearing without conducting a further hearing 
on the revisions. 

Any person heard or represented at a hearing or re* 
questing notice shall be given written notice of the action 
of the Board (Authority) with respect to the subject 
thereof, 



No rule or regulation, or amendment or repeal thereof, 
shall become effective until a certified copy thereof has 
been filed (in the manner provided by State Law regarding 
the filing of administrative regulations), 

Any person adversely affected or threatened by any rule 
or regulation of the Board (Authority) may obtain a 
determination of the validity of the application of such 
rule or regulation by petition for review (pursuant to 
appropriate State Law regarding administrative review), 

SECTION 5, Local Government, 

(a) The Board (Authority) shall exercise all' powers 
and perform all duties as provided for in the Act with 
regard to any personal information system operated, con- 
ducted or maintained by such local government, other 
political subdivision or combination thereof; or 

(b) At the request of any local government, other 
political subdivision or combination thereof in this State, 
the Board (Authority) may adopt regulations to: permit 
the establishment of a local information practices board 
(authority); govern the operation of such local informa- 
tion practices board (authority); and define the rule- 
making and review authority of such local information 
practices board (authority), Such local information prac- 
tices board (authority) shall be operated by and at the 
expense of such local government, other political sub- 
division or combination thereof, 

(c) Such local government, other political subdivision 
or combination thereof may request that the Board 
(Authority) dissolve a local information practices board 
(authority), 

SECTION 6, Rights of Subjects of Information. The 
rights of persons on whom the information is stored or 
to be stored and the responsibilities of the responsible 
authority shall be as follows: 

(a) The purposes for which personal information is 
collected and used or to be collected and used shall be 
filed in writing by the responsible authority with the Board 
(Authority) and shall be a matter of public record pur* 
suant to Section 4. 

(b) A person asked to supply personal information 
shall be informed of all intended uses and of the purpose 
of all intended uses of the requested information. 

(c) A person asked to supply personal information 
shall be informed whether he may refuse or is legally 
required to supply the requested information, He shall be 
informed of any known consequence arising from his 
supplying or refusing to supply the personal information, 

(d) Information shall not be used for any purpose 
other than as stated in clause (a) of this section unless 
(!) the responsible authority fir«?t makes an additional 
filing in accordance with clause (a); (2) the legislature 
gives its approval by law; or (3) the persons to whom 
the information pertains give their informed consent, 
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(e) Upon request to a responsible authority, a person 
shall be informed whether he is the subject of stored in- 
formation and if so, and upon his additional request, shall 
be informed of the content and meaning of the data re- 
corded about him and shown the Information without any 
charge to him. For a six month period after such dis- 
closure* additional disclosures shall be made at the cost 
of making the disclosure, This clause does not apply to 
information about persons which is defined by statute as 
confidential or to records relating to the medical or 
psychiatric treatment of an Individual, 

(£) A person shall have the right to contest the 
accuracy or completeness of information about him, If 
contested, the person shall notify in writing the responsi- 
ble authority describing the nature of the disagreement, 
The responsible authority shall within 30 days correct the 
information if the data is found to be inaccurate or in- 
complete and attempt to notify past recipients who have 
received the inaccurate or incomplete data within the 
preceding two years (or other desired term) of the in- 
accurate or incomplete information, or notify the person 
of disagreement. The determination of the responsible 
authority is appealable in accordance with (Administra- 
tive Procedures Act or procedures in this Act), Informa- 
tion in dispute shall not be disclosed except under con- 
ditions of demonstrated need and then only if the person's 
statement of disagreement is included with the disclosed 
information, 



(g) A person has the right to be free from the storage 
and continued collection of persona! Information no longer 
utilised for any valid purpose. 

(h) A person has the right to be free from the col- 
lection, storage or dissemination of any personal informa- 
tion collected from anonymous sources except as exempted 
by the Board (Authority) or statutes, 

SECTION 7, Penalties, Civil and criminal remedies 
should be established consistent with statutes and environ- 
ment of the State,) 

SECTION S* Common Law. No existing statute or 
common law shall be limited or reduced by this Act. 

SECTION 9* Severability of Unconstitutional Provi- 
sions Jt any Section, subsecUen s sentence* or clause of this 
Act shall be adjudged unconstitutional, such adjudication 
shall not affect the validity of the Act as a whole or of any 
Section, subsection, sentence or clause thereof not adjudged 
unconstitutional, 

SECTION 10* Liberal Construction, The provisions of 
this Act and the regulations promulgated thereunder shall 
be liberally construed to protect the person's right to 
privacy arid confidentiality* 

lECnON Ih Effective Date, This act shall become 
effective (desired date, This date should allow sufficient 
time for planning and implementation,). 
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Supporters of some of the sample bills were 
questioned at great length, and the committee 
profited from diverse experiences occuring in each 
of the States. After a detailed examination of the 
previsions of each bill, the committee attempted to 
isolate areas of consensus, However, the more spe- 
cific it became, the more conflict of opinion arose, 
Nevertheless, the discussions provide helpful insights 
to would-be sponsors of data banks privacy legisla- 
tion pertaining to State and local government, 

At the outset, Chairman Aronoff outlined struc- 
tural components needed in most data bank privacy 
legislation: 

1, A statement of purpose. 

2. A definition section. 

3. A designation of enforcement power, 

4, A section establishing the individual's right to see* 
copy, review and challenge a record about himself, 

5 S A provision on minimum obligations of record-keeping 
organizations. 

6, Conditions of disclosure and dissemination of informa- 
tion. 

7, Exceptions (in some bills)* and 

8, Civil remedies and general penalties. 

Aronoff persistently emphasized the importance 
of balancing privacy bills with right-to-know stat- 
utes, He also consistently pointed to subleties thai 
are not always immediately apparent— for example, 
the precise degree of consent needed from the sub- 
ject of a file before access to or dissemination of 
information from the file is permitted, 

The first witness, Marjorie Eltzroth of Massa- 
chusetts, in reading Governor Sargent's prepared 
statement, pointed out that a wise policy demands 
that government "put its own house in order" before 
"pressing the fight for privacy against giant credit 
bureaus, medical data banks, private educational 
institutions and the like," The first step in develop- 
ing the Massachusetts approach to privacy was the 
creation of an independent citizens* commission, 
which met for a year and found some basic facts 
about privacy in State government: 

I. There are no minimum standards to insure privacy in 
existing State laws because of the variance in the 
statutes. 



2 5 Administrative practices and the regulations interpret- 
ing them are more uneven than the chaotic State laws, 

3. Agency heads lack knowledge about what information 
is contained in their computer systems while the sys- 
tems managers who have that knowledge lack under- 
standing of its value or importance; and 

4, Virtually all computerized systems are insecure, 

As a result of these findings, some minimum 
standards were issued and, already, some State 
agencies are overhauling their information prac- 
tices, 

Nevertheless, Sargent's statement emphasized, 
State laws will be worthless unless and until the 
Federal government passes privacy legislation. 

In the question-and-answer period that followed, 
Aronoff noted the general applicability ol the Mas- 
sachusetts model: 

First, the State had a commission, a body to investigate 
what Is going on in government and report back to the 
governor; secondly* an executive order was issued on the 
part of the governor to speed action forward; and thirdly, 
comprehensive legislefion was de^fted along the linen of 
the HEW guidelines.* 

In his testimony, Mike Cullen of California said 
that two years ago voters in his state 
responded to the question of protection of individual 
privacy by amending our Constitution to include privacy 
as an inalienable right of all people. By that action, the 
people of California provided the legislature with a clear 
mesiage, which reflected a general dissatisrlcation with the 
erosion of their personal privacy . , , We'd come in the 
realization that, like the bald eagle and the blue whale, 
privacy was becoming an endangered ipecies. 
Too easily taken for granted* privacy was being eroded to 
the degree that it could become a memory rather than a 
reality, Just as the eagle and the whate are integral parts 
of our natural ecology, so is privacy an integral part of 
our social ecology, and the people of California are asking 
that the assault on it be halted, 

With the increasing use of electronic data pro- 
cessing technology in California, Cullen said, "it is 
apparent that the right of an individual to privacy 
is contingent upon a modern day factor; that is, 
computer-related security," 

Cullen also noted that the effective universal 
identifier in California is the driver's license* 

* Refers to principles set forth in Jfccdr^ Comp/fW, and the 
Rights 0f Citizens, pp xx-xxi. See append ix V* 



66 



61 



SISSION 
SUMMARY 



State Representative William R, Bryant, Jr., re- 
viewed the Michigan bill, which he drafted, He 
pointed out that privacy legislation was a "kind of 
a new hot issue, somewhat akin to consumerism, 
and we are going to have to be careful we don't do 
things wrong," He said it would affect a lot of peo- 
ple, would have significant cost-related effects, and 
would change State and local government con- 
siderably* 

Daniel B, Magraw, the final witness, summar- 
ized the key points of the omnibus-type Minnesota 
bill, which along with the Michigan bill had been 
included in the pre-Seminar mailing of materials, 
Three main sections cover: 

1, A kind of Bill of Rights giving people access to 
their records, 

2, The promulgation of rules and regulations to 
apply to State agencies and local governments, 

3, The requirement for a report listing personal 
data banks so public officials know tie facts 
concerning existing systems, 

An interesting discovery by Magraw was that 
virtually every city and county-level file in Minne- 
sota is a "people" file. There seems to be no such 
thing as a "nonpeople" file. In addition, about 75 
percent of these files are classified as public records, 

Magraw also spoke of the problem of the use 
of public records, and the difficulty of telling pecN 
pie in advance how a public record will be used, 
If records are truly public, anyone can use them 
for any purpose they wish, 

Although it was not a part of the direct charge 
to the Committee, several members strongly felt 
that legislatures should examine and re-examine the 
need of government to collect personal data in the 
first place, If such need exists, which specific data 
are relevant and necessary? 
This gets to the core of the privacy issue, Assuming 
that State and local government does have the 
right to collect some personal information, it was the 
consensus that comprehensive omnibus legislation 
covering State and local government record keep- 
ing is necessary* The Committee voted issue by 
issue and reached the following conclusions; 
I. A bill should enunciate the five principles of fair in- 
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formation practices recommended by the HEW com- 
mittee (with one exception), to wit: 

a, There should be no secret record keeping operation, 

b, People must be able to find out what information 
about them is on record and how it is used, 

c, People must prevent information gathered for one 
purpose from being used for another purpose with- 
out consent, (Several members felt that the term 
consent must mean ^informed** consent. The Com- 
mittee was unable to resolve whether consent was 
a mandatory part of the bill* since it raised serious 
cost questions and questions of practicality, At the 
very least* the Committee determined that an in- 
dividual should be made aware that information 
collected for one purpose has been used or will be 
used for another purpose,) 

d, People must be permitted to see, amend, and cor- 
reet their records, 

e, Recordkeeping organization must assure the ac- 
curacy and reliability of data and prevent misuse, 

2, The Committee was evenly spilt over whether an 
omnibus bill should apply to the private sector as well 
as to the governmental sector, For practical and politi- 
cal reasons many people felt that the private sector 
should be covered in separate legislation, 

3, An omnibus bill should cover all information systems* 
not just automated personal data systems, 

4, The bill should cover all "legal persons", not Just 
individuals, (The discussion was toy brief to draw a 
conclusion as to whether there was a real consensu? 
on this question,) 

5, An omnibus bill should give special treatment for 
statistical research records, (There was no attempt to 
define "special treatment, H ) 

6, An omnibus bill should include criminal offender 
records, (There were strong dissents on this question,) 

7, By a slight majority, the Committee preferred an in- 
dependent, qmnHMcml board rather than regulation 
by sofcuU of by m rotating State agency of board, 
(This discussion did not go Info 6^pih and the Com* 
mittee found it difficult to address the issue without 
specifics,) 

8, Conflicts with State freedom of information acts have 
to be resolved as do possible conflicts with the First 
Amendment of the Constitution, 

The Committee was almost equally divided as 
to whether the legislature should provide an ap- 
propriation to cover the cost to State and local 
governments of implementing a privacy statute. 

The Committee agreed, with some dissent, that 
the bill should be futuristic rather than retroactive, 
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LUNCHEON 
ADDRESSES 

Two pertinent addresses supplemented the pro- 
gram of the Privacy Seminar. At lunch on the first 
day, participants heard an address by Dr. Alan F\ 
Westin, Professor of Public Law and Government 
at Columbia University, On the second day the 
Seminar concluded with a luncheon address by 
State Assemblyman William T. Bagley of Cali- 
fornia. An abstract of the Westin address is printed 
below followed by the text of the Bagley address: 
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Abstract of Luncheon Address by 
Man F. Westin 

The theme of this presentation is that we have lift the 
fecade of early alarms and empirical studies with regard 
0 tne "computers-and^privagy" issue and have entered 
he era of regulation, Moving into the regulatory mode 
rill require a much closer relationship and exchange of 
lews between computer professionals and organisational 
lanagers on the one hand, and the public policy makers 
n the other, Such a new relationship must be built, in 
onsiderable part, on close monitoring of the effects of 
ew laws and regulations on the operations, costs, and 
eeision-making processes of organizations so regulated, 
nd on better informed estimates of the likely effects of 
irther proposed regulations. 

I. Concerning the emergence of the "databank** issue, 
general fears about increased capacities for technologic 
oal surveillance over individuals and groups were 
voiced in the early 1960's. These increased capacities 
included physical and psychological surveillance as 
well as data surveillance. By the late 1960% this had 
been thoroughly aired in the mass media as well as in 
legal, civil liberties, and computer-industry circles, 
The early alarms developed three basic assumptions 
as to what were seen as "inevitable" effects of large 
organizations adopting computers in their keeping of 
personal records: that it would lead to collecting 
more extensive and intrusive Information about the 
organization's clients, customers, employees, or sub- 
jects; that organizations with computers would ex- 
change personal data more widely with other com- 
puterized organizations; and that automation would 
lead to the creation of more secretive or inaccessible 
flies on persons. 

. The National Academy of Sciences* Project on Com- 
puter Databanks (published in Westin and Baker, 
Databanks in a Free Society, 1972) found that the 
!hree "inevitable" effects of automation were not yet 
taking place in the real world of computerizing 
organizations. Various organizational, financial, legal 
and technical constraints were keeping the existing 
patterns of information collection, sharing, and 
openness-or-secrecy in essentially the same channels— 
whHhsr thosf were in harmony or at odds with 
privacy and dv.z process claims— as had existed in 
those organist Ions before automation of flies had 
tagun. 

The HAS Hd6y also concluded that a major records- 
mdpmmy dabatg would be taking place today in 
American Society even if the computer had not hem 
de«f, .;r*i?. This is because our society had already 



become, by the 1950% such a complex service- 
oriented, and credential-based social system, and so 
heavily reliant on formal records, that the standards 
used for judging people and the procedures used for 
making those decisions would have come under fun- 
damental attack in the climate of social upheaval in 
the 196G*s and down to today, It is major challenges 
to governmental and private-organization use of race, 
sex, cultural conformiryi sexual practices, political 
activity, and similar exclusionary standards, as well as 
traditionally secretive and closed decision making 
practices, that is the real crux of the problem. How- 
ever* the computer is clearly accentuating these issues 
by increasing the speed, efficiency, and use of auto- 
mated personal data, and it is increasingly in the 
setting of large, automated databases that new public 
policies must be applied, 

5, The HAS Report, along with the report of the MEW 
Advisory Committee on Automated Personal Data 
Systems (3973), called for regulatory action in the 
mid- 1970^ before computer systems became so large 
and costly, and expanded into more ill-considered 
uses, that American society might not be abla to 
bring them under effective and cost-bearable controls. 

6, The findings of the NAS study and the analysis of the 
HEW Report are closely paralleled by similar studies 
and reports in many of the Western parliamentary 
nations, Conclusions favoring regulatory action have 
been reached in half a dozen of these countries, 
ranging from Sweden*s National Data Protection Act 
of 1973 to Britain's policy of relying on codes of 
principle rather than statute or legal rights. There 
are substantial reasons why the U. S. should not 
follow either the high-administrative control policy of 
Sweden or the ,i no-Iaw M policy of Britain. 

7, Our response has been to enact both "rifle-shot" laws 
such as those dealing 'with commercial reporting 
agencies (Fair Credit Reporting Act of 197C) and 
student records (the Buckley Amendments), and also 
to pass omnibus statutes based on a blend of the 
HEW Committee's "fair information practices'* ap* 
proach and the "Bill of Rights*' approach championed 
by Senator Sam Ervin, Jr, and the American Civil 
Liberties Union, Such pursuit of both single-area 
detailed laws and jurisdiction-wide fair information 
acts will be the arena of action among the states 
during 1975-76, 

8, We will ?m& to pay Hose amnWm to how the general 
tuhi and procedur^^ of any Federal and State privacy 
f*atu!es work out in jmrttfrc This will require techni- 
cal, legal, and public policy experts to gather ent- 
pineal data ibmK money costs, efficiency costs, 
effectiveness for protecting citizen rights, levels of 



69 * 



LUNCHEON 
ADDRESSES 



use, ease of evasion, and other "inmlernentation" 
matters. Who will do this, how, and through what 
mechanisms of legislative and public oversight will 
be critical issues for the next few years. 

9, Several pending bills in specific areas— criminal justice 
information systems, banking privacy and credit re- 
porting, omnibus bills, as well as others— =eou!d ex- 
tend Federal regulation to State and local governme nts 
and to the private sector, 

10, Finally, computer professionals in particular must be 
more forthcorning as legislative alternatives and regu= 
latory rules are debated. Many desirable protest ions 
of individual rights can be achieved without disrup- 
tion of socially vital information activities if informed 
concepts are used in the regulatory action. On the 
other hand, not every demand made in the name of 
"privacy" or ^personal rights* deserves to be written 
into law as a prohibition of data uses or a limitation 
on organizational information policies. A society that 
wishes to pursue the JerTersonian ideal must recall 
that he was a champion of knowledge, science, and 
technological progress as much as he was of personal 
liberties, and that striking the right balance between 
these values of a free society should still be ©ur goal* 



Luncheon Address of William T. BagSey 

THE POLITICS OF PRIVACY 

Today's privacy "rage" could very well supplant and 
certainly has become a sequel to the latter-day demands 
to* "freedom of information." How you can protect both 
the right of privacy and the public's right to know, and 
at the same time pass a bill on these subjects at the state 
level, is the rabject to be addressed. We will only allude 
to the esoterics and then discuss in detail the practical 
aspect of putting a palatable and thus passable bill together. 
Thus, the politics of privacy, 

Historically, the right of privacy evolved as a "tort"— a 
civil law where something not in the public domain was 
brought to the public 1 ! attention. Even though true, an 
invasion of someone** "right of privacy," by making 
commercial usage ©f some private event, was held to Toe 
a civil wrong and therefore the basis of a civil cause of 
action. 

This tort was late in its arrival into the common law, 
having something of its genesis in an article by the then 
Professor Louis Brandeis, 4 Harvard Law Review 193 
(1890), who defined privacy m "something all men (and 
we now would add women) are entitled to keep from 
public curiosityl* 

In those earlier days and until recently the thought of 



having, or of being the subject of, a dossier was only 
accorded to the priviledged few. It was even thought of 
as being desirable. But now the dossier has become 
democratized, available to about almost anyone, and In 
computerized profusion. Thus our concern today for the 
"right of privacy* 1 and necessary protections, but in a 
vastly different sense. 

By now, the participants of this Seminar certainly are 
aware of the elements of this present day social problem 
and of the components of the solution, I shall not spend 
much time relating those elements. Briefly stated, on the 
problem side of the ledger, we find a proliferation of 
record-making and recordkeeping, the potential arid actual 
linkage of different records, the obvious easy storage and 
retrieval elements of computerization, the seeming authen- 
ticity of "print-outs," and, most important, the deper- 
sonalization of the record-keeping process, The answer to 
the question— where is the record— is of equal importance 
to what is in it, This illusory aspect, this depersonalization, 
this inability to "talk to the clerk," all add to and 
dramatize In the public mind the feeling of fear of 
potential computer abuses of the right of privacy* 

Right or wrong, founded or not, we must recognize that 
the fear is there in the public mind. It is our job in 
government not only to prevent the possible abuses, but 
also, of equal importance, to allay the public fear. 

And thus we come up with ''solutions" which, when put 
into law, become substantive rights of citizens in this field. 
Thus we propose a right of access of individuals to their 
own records, a right of insertion of corrective materials. 
We propose a limitation on linkage. We propose "audiU 
trails" to see who is looking at us, And we propose 
technolopeal security required to be built into the 
computer. 

I would add that of equal importance or perhaps even 
of more importance than any of these "rights 9 * is the 
requirement or the necessity for "identifying" the com- 
puter, A large part of the fear would disappear and 
much of the ominous aura of the computerized age would 
be dispelled if we could somehow re-personalize record- 
keeping, That does not mean that we are going back to 
manual recordkeeping. It does mean that we must pro- 
vide a ready mechanism for finding the computer and, 
specifically, for finding the named person in charge of 
computer security and in charge of your record* Then a 
member of the public can talk to that person and, in the 
vast majority of instances, gain satisfaction, 

And now let us talk about the "politics of privacy" 
again recognizing some of the problems, some of the 
pitfalls, and some of the pluses. 

Negative Aspects 
First of all, in reference to problem areas, let us recog- 
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niie the basics, In todays society, one new badge of 
authority is to carry the key to the computex-^arid we all 
know how difficult It is to take badges away from people. 
And, in that context, let us not try to solve all social 
problems all at once with a single omnibus piece of 
legislation* 

For example, let us asiume that one of us* list nighu 
was noted dancing on the stage of the Silver Slipper, and 
assume that this was made a matter of appropriate record. 
Regardless of computerization there is not much we can 
do with that kind of a record, except perhaps to assert our 
right of insertion and correctioii by adding to tee record: 
"but she really is a idee lady— she's a friend of my wife 
and all play bridge together.*' 

And let us also recognize that for every ^computer 
horror story" that we tell in an effort to propose sad 
propound the protection of the right of privacy, epponen^ 
to legislation will counter with their horror Stories-Hmijsl 
of them couched in terms of cost* But recognize also tika& 
you can remove these objections by simply not trying to 
solve all tie problems ail at once and by, for examine, 
eliminating expensive audit trail requirements, eliminating 
the requirement of prior notirleatoo before records a^re 
kept or divulged* and by eliminating any prohibition agaiust 
linkage of one computerized record with another* without 
requiring prior consent of the subject. Under a "siilleri* 
nium"* piece of legislation, all of these latter components 
would be important; but one must reeogske thjit by 
definition the "inHlenmuni H cannot be realized in less 
than one thousand years. 

Let me relate some quotes from the oppoflents of AB 
2656 in California, First of all I should state bat this 
Tvas, contrary to my good advice given here r an omnibus 
bill which covered not only all govemmemtal (state snd 
local) computerized personal data reeord>, but also 
covered the entirety of the private sector* Parenthetically, 
I have been asked, in incredulous tones* 'who in the world 
could oppose a bill to protest the right of privacy? Who 
opposes?— just the entire public sector and the entire 
private sector! That was almost literally true of the bill 
in its original all-encompassing form* For example: 

Hie State Department of Finance objected to "excessive 
costs 1 ' in the range of $10 million to $34 million. 

The Department of Motor Vehicles told as flat they 
would have to send notices, perhaps annually under the 
bill, to 14 million licensed drivers in California, 
Tfce County of lan Bernardino said ^©ur bull would 
mandate a nlgfltrnare of added paperwork to current 
County procedures* 

The Department of Justice states , „ , M as a matter of 
public poliey criminal Justice agencies should not be 
subject to its provisions * 

Computer Services, Rockwell International . , , "this 



would be an impossible » wstriction comparable to crip- 
pling tile interstate use of telephones, radio transmission 
and aviation. 1 * 

Forest Lawn Memorial Parks and Mortuaries , . - "this 
legislation would interfere with related business activities 
for which the company-owned computer is being used," 

The California State University and College System . . - 
JiB 2€$B fails to take into account the unique educa- 
tiorial fuactioa of our University system." 
Mm Bay Municipal Utility District (EBMUD) . , . 
"customer billing should be excluded." 

Creative ^ocio-Medics Corp* . . . M medieal reeords g 
tsi^ecM/ rnaitai health records, must be treated as a 
separate issue tram other computerized records/ 1 

State; Teachers Retirement System , . , "we comply 
with the mini and intent of AB 2656, and to Impose 
o4dlfioijaf reporting requirements would be iOT*eeessary 
and in higher udmiaistrstive costs," 

Siite teachers Retirement System , * * comply 
w/iih spirit and intent of AB 2656, md to isopewe 
iwddidonal reporting requirements wo»jld be unnecessary 
arid result in higher administratis costs." 

ITW/Credit Data . , , *1he aH^noom^iusjag regula- 
tlorYS . , . £f ewctod verbatim would ptewg deif imental if 
no! destructfrt io the credit Industry without meaningful 
be aeflt to individuals in search of credit/' 

CaJifomia Highway Patrol , , . "the ability of this 
Department in providing effective plains in crirne 
prevention will be deterred by passage of this bill."— etc, 
etc, 

t hrve to say right now thm opposition from law esv 
fnre«mcnt is most formidable. Therefore, the first amend- 
tnrnt ^hich I accepted was to exclude law enforcement! 

Ail of the above, in most abbreviated fashion and 
eljjTiinatiog a large pun of the response from the public 
aiid private sector, indicates what you get for trying to 
bite off more than you ean chew. Again, the message is 
to come up with a simple, palatable and passable piece of 
legjsliticn— and denH try to solve all of the social ills of 
the nation in the process, 

A caveat, however: please avoid the temptation of one 
sitnpHe goliiticn— that being to close public records, Jiat 
only would that solution be counter-productive, but it 
would also raise the legitimate and understandable wrath 
of the Journalism fraternity, 

Let me add a side thought at that point, One of the 
piatest allies that I had in passage of major freedom of 
information bills in California was and is the California 
Newspaper Publishers Association, We must now interest 
therri arid their counterparts in the field of protection of 
privacy. Good social policy and enlightened selHnterest 
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would dictate that media representatives join us In our 
efforts to protect privacy. 

The risk* of course, is if they do not join us in a con* 
structive effort, somewhere along the line the forces that 
impelled the ominous fear referred to earlier may very 
well causa legislation to pais which will dose otherwise 
opened public governmental records! 

Let me emphasize and restate that latter point, Restated, 
the public^ "right to know" and a person*! "right of 
privacy" are not and should not be made to appear to be 
conflicting rights, They are, instead, aLd should be made 
to interact as correlative responsibilities. Our obligation in 
government, in final analysis, is rather simple* and that 
is to make the system work. Specifically, our job here is 
to weave seemingly conflicting rights and responsibilities 
into a correlative scheme where we preserve both the 
public's "right to know" and the individual*! right of 
privacy. On first blush that may seem most difficult, But, 
and again if we choose not to e~re all social ills all at 
once, it is a rather readily attainable goal. 

Positive Asficts 

On the plus side) of the polities of privacy, we should 
also recognize some basics, Thus issue, the protection of the 
right of privacy, is as politicaliy sexy as it is socially 
necessary. "Everyorje is for protecting our right of privacy; 
the liberals and the conservatives, from the ADA to the 
YAF, from the Birchen to the Bombers, all are on "our" 
side. So, first of all, recognize that we have allies— but 
recognize, also, that we have to organize our allies, 

There is another, perhaps subsidiary, public fear, That 
is the fear of the social security cumber becoming a 
universal identifier (LJID). In the vernacular, the social 
security number is becoming more social and less, secure, 
Use, in the nice sense of that word, this public fear to 
build a constituency, The constituency is there but it is 
not organized* 

Building a CCNSTrrujiHCy 

So let's tali about the mechanics of building a con- 
stituency, a basic necessity toward passing a bill* We* 
of course, want to and should involve the "cause" people. 
Common or Uncommon, We need and want their support 
and actually should go out and help organize their sup- 
port, With a little prodding and prompting, they will 
realize that this is a cause that also needs their support, 

We also need (and they need us) .the computer people, 
Again, a combination of those great forces for good, pro 
bono publico and constructive self-interest; dictate that 
the computer industry Join forces to pass palatable legisla- 
tion rather than face the risk of opposing, and ultimately 
perhaps swallowing- the impalateble. 



That latter thought, to bring in and work with the 
computer people, is not at all impossible— not unpalatable, 
As long as you eschew the impossible, and work with 
their governmental relations people and their technical 
people (and also play on their fears a little bit), you will 
be successful . in encouraging their constructive coopera- 
tion, AM of this, again, is calculated to construct a con- 
stituency. Work with the Council of State Governments 
who can provide both resources and guidelines for your 
work, Also, do not ignore local government, Some of us 
at times express our desire for "home rule", Home rule 
becomes nothing more than a "homey homile" unless we 
practice the art— bring in, work with, and just plain in- 
clude local government and local governrnerital officials in 
our work. Govemmentaily, mere are many more com- 
puterized personnel data banks within the sphere of local 
government than those operated by the state, 

Simplify the Bill 

So, after all of that, let's put a pallatjble and passable 
bill together, I recall at least one old saw from law school* 
Before you think great thoughts, read the statute, Para- 
phrasing, let me say that after you have thought all of 
your great thoughts, draft and passible piece of legislation , 

Therefore, my rather gratuitous but hopefully not 
hollow piece of advice, as one who has been through this 
but did not follow his own advice, is to put together, the 
following simple bill. I would start with a simple privacy 
"code of ethjea" which would provide guidelines and 
statements of intent but not necessarily the full impact 
and import of law, That's a good place to start, I would 
provide a right of access of the subjects of computerized 
data banks, I would provide the right of insertion Cor- 
rection) and perhaps some "forum" to determine wither 
a given item on the record should he deleted. Providing 
the forum is almost as important (perhaps more so) as 
providing the actual technical and somewhat ethereal right 
of deletion, 

Start out with just governmental records— do not try to 
take on the whole world (all of the private sector) all at 
once. I do not mean to demean the efforts of the social 
thinkers in this field. These efforts are most Important 
and, in fact, are catalytic to our being here today, How- 
ever, from the practical standpoint of the politics of 
privacy and in the vemaeulari "you ain't gonna do it all 
at once," 

Avoid the costly items, such as a required audit trail, a 
required "prior consent** to interconnections, a required 
prohibition against linkage. These components might very 
well be initially drafted into an omnibus ball, but be 
ready to amend them out—quickly, 

Eliminate law enforcement— I would eliminate that in 
my original draft* Recognise that progress in a democratic 
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society Is made very slowly. Recognize also that progress 
in a democratic society should be made slowly— because, 
if progress were very rapid the society way not be very 
democratic* 

So the bottom line would seem to be, fin! in reference 
to governmental records, to provide the right of access, 
the right of correction and insertion and some control 
over interconnection (if only an administrative guideline), 
There should be some constraints on record keeping itself, 
There should be some provision for deletion and some 
provision for shutting down the recordkeeping machine. 
These latter need not be in exact form out could very well 
be left to administrative action. Remember, another bill 
can always be passed 

Also recall the abjt/tfiite necessity for rc-personalization 
of record kaxpipj, > recommendation in this regard is 
to require both ?abUt f nd private computerized data banks 
to register t*>r > ^ thai they are personalized data banks. 
This is not arid not be construed to be a licensing 

requirement, Rernimbef, we are alio interested in pro- 
tecting First Amendment rights. But the simple fact of 
registerini— with for example the Department of Con- 
sumer Affairs cr the Secretary of Stated office—that you 
are operating a personal data bank is important in the 
re-personaiization process. A simp!* -*M wy nm- 
bureaucratic system of registration can he m^wed, All 
we are interested in is 1 ) that you op&mte a mmpumimd 
personal data hank, 2> what sphere) or genera* area of 
information is encompassed therein, 3) where is it located 
(address and telephone number) and 4), most import- 
antly, who— fey name— do you call to obtain "relief." The 
department involved need do no more cnan keep a record 
of that informaticn and make sure that an individual 
citizen can make Contact t#i!h to computer— and thereby 
be able to obtain He stated rights e*f access and correction. 

All of this may sound too simple, But the fact is that 
kind of bill can be passed and the basic rights with which 
we are concerned can fee protected. Having done that— 
having provided some basic lights of privacy and having 
established some t^pe of public forum to which a citizen 
can appeal— we will have done a major part of our job 
in not only protecting those rights but allaying the public 
fear which does exist. 
All of this can be accomplished long before 1984. 
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CONSUMER 

PRIVACY 

INTERESTS 



To address adequately the subject of Consumer 
Interests in Privacy required a different approach 
than the mock legislative hearings used as discus- 
sion vehicles for other topics during the Seminar, 
The relaxed and informal approach of a panel 
discussion seemed to provide the best method for 
getting at the fundamental questions* 

Panel nioderater S, John Byington, Deputy 
Director of the U. S. Office of Consumer Affairs, 
was joined in the discussion by panelists Joseph L. 
Gibson, general attorney for MARCOR (parent 
organisation of Montgomery Ward); Theodore 
Jacobs* Executive Director of the Center for the 
Study of Responsive Law; John Kehoe, President 
of Consumer Concerns, Inc., and former Director 
of the California Department of Consumer Affairs; 
Kenneth A, McLean, Professional Staff Member of 
the U, 5> Senate Committee on Banking, Housing 
and Urban Affairs; and Peter Sehuek, Director of 
the Washington Office of Consumers Union. 

The pre-seininar materials mailed to participants 
included the following issue paper s edited for in- 
clusion here: 
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Consumer interests in privacy extend to records con- 
taining personal Information resulting from market place 
activities such as acquiring property, services* money, in- 
surance!, or credit for personal or family uses, TTie breadth 
and diversity of consumer transactions and the variety of 
recordkeeping practices associated with them defy easy 
definition o£ personal privacy interests, specification of 
privacy abuses, or prescription of effective remedies 
against inifi«gements of privacy, 

The effective operation of the modern market plaee 
requires the collection and appropriate use of consumer* 
related data. Business decisions affecting consumers based 
on inaccurate, obsolete, irrelevant and incomplete data 
can seriously jeopardize the reputation and economic in- 
terests of the i&dividuaL Misuse of information can 
similarly produce adverse consequences for the individual. 
Unrestrained access to and linkages of records ©n con- 
sumers by business have enormous privacy implications. 

Recognition that consumers have certain rights of 
privacy and that businesses should engage in fair infor- 
mation practices prompted Congress to enact the Fair 
Credii Reporting Act in 1970. This act, however, Is 
limited to credit reporting agencies and thus does not 
cover the full scope of consumer transactions in the 
market place. The need for strengthened and broadened 
protections of consumer privacy interests is receiving In* 
creased attention by consumer and business groups and by 
governments at the federal, state and local levels, Vitally 
needed is a definition of intergovernmental roles and re- 
sponsibilities for oversight and regulation of record- 
keeping practices in the private sector, 

Accordinily, the following topics and issues serve as a 
basis for consideration of this subject. 

Privacy Rights In Consumer Transactions 

Grtat quantities of personally identifiable data on con- 
sumers are collected, maintained, and distributed in 
today^ market place primarily by companies doing busi* 
ness in more than one state or country, Credit reporting 
agencies, financial institutions, many retailers, credit card 
companies, insurers, and other businesses make frequent 
use of data on individuals which is typically stored in and 
retrieved from computers, In this area of commerce, in- 
dividuals are susceptible to— even when they do not 
actually suffer fir m— invasions of personal privacy. 

What rights should consumers have regarding the col* 
lection, maintenance and distribution of information 
pertaining to themselves? 

Haw should those rights be protected? 
How should sensitive data (such as information on 
m%m\ habits, abuse of alcohol and drugs, emotional 
problems) be treated? 

Are there special problems with, and consequently the 
need for special treatment of, certain types of records. 
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including: medical records; telephone records, par- 
ticularly of longdistance calls; details of travel records; 
records on individuals'' financial transactions maintained 
by financial institutions? 

What is the best role for the states and localities to play 
in areas where the federal government is already in 
volved, such as the area covered by the Fair Credit 
Reporting Act (credit, insurance* and employment trans* 
actions involving information developed by consumer 
reporting agencies)? 

Cable Television Systems 

Certain cable systems have tha capacity to survey all 
residences connected to the system to determine which 
program is being watched in each home. Individual sefi 
can also be turned on and off from a central source, 

Is the most acceptable solution federal legislation pro* 
hibiting monitoring of communications entering and 
leaving a citizen's home via cable television, and for- 
bidding disclosure of identifiable information about the 
viewing habits of subscribers unless there is a court 
order? 

What role, if any, is desirable and feasible for state and 
local governments? 

Electronic Funds Transfer Systems 

Systems are under development allowing immediate at- 
point-of-sale transfer of payments from consumer to 
merchant accounts and between financial institutions. The 
unauthorized disclosure* interception* or use of such data 
could result in severe invasions of privacy if it revealed a 
clear picture of a consumer's movements, spending prefer- 
ences, and personal habits. For such a system, the ade- 
quacy of the customary monthly bank statement also needs 
to be examined* as does the adequacy of present law on 
bank liability for errors in the recording and use of 
account information, 
A recent federal law establishes a National Commission 
on Electronic Funds Transfer, What should the Com- 
mission do? 

What roles are appropriate for state and local govern* 
ments? 

Mall Lists 

There is some public concern over both government 
and private sector production, dissemination, and use of 
mail lists, 

What are the real privacy interests to be protected? 

Are there material privacy abuses in the list area? 
What about an **opt out" opportunity for removing one's 
name from lists? 

Shoulo lists developed by government agencies be 
treated differently from those developed by the private 
sector? 
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The basic Issue raised during the consumer 
panel discussion was the extent to which consumer 
interests in privacy apply to records containing 
persona! information— records produced by market- 
place activities such as the acquisition of property, 
services, money, insurance or credit for personal 
or family use. The panelists also raised the question 
of whether or not an omnibus State privacy bill, 
one designed to affect record keeping and access 
to such State records, should apply to private sector 
records, including those maintained by industry, as 
well as to government records. 

One panelist made two distinctions between 
State and commercial inquiries into private infor- 
mat ion. The first was that it is economically pro- 
hibitive for industry to collect unnecessary personal 
data* Since government doesn't have this same 
economic inhibition, there is a greater probability 
that government will collect more personal data 
than industry, Hie second distinction is that anti- 
trust laws and vigorous competition restrict the 
interchange of personal information between busi- 
nesses. Therefore, that panelist believed, personal 
data obtained by private companies should not be 
included within the scope of an omnibus State bill. 

Another panelist contended that government 
information gathering involved the application of 
different principles than commercial information 
gathering and that they required radically different 
approaches. For example. State or Federal govern- 
ment records, with certain exceptions, are public, 
whereas corporate records are generally private. 

The core of the issue involves the 'question of 
where most of the abuses lie. Some panelists per- 
ceived greater abuses in the private sector than in 
public records keeping, As an example of such 
abuses, a panelist cited the Federal Trade Com- 
mission's (Consumer Credit Division) case against 
the Retail Credit Company, This case involved the 
method by which information on individuals is 
obtained, the frequent inaccuracy of such informa- 
tion, and the unauthorized use of it* Since this 
seemed to spark the greatest interest, the major 
portion of the remaining discussion was devoted to 
credit lending. 



The panelists described two types of credit re- 
ports* One is a simple report relating to commercial 
transactions* It involves who you are, where you 
live, and by whom you are employed. The other 
type is the investigative report, The greatest number 
of complaints involve investigative reports such as 
those requested by life insurance companies trying 
to find out what kind of person they are about to 
insure* 

The current structure of the credit reporting in- 
dustry makes it nearly impossible to produce 
accurate investigative reports* Life insurance com- 
panies, for example* not only demand extensive 
amounts of information about physical characteris- 
tics, morals and sex life, but demand such informa- 
tion at the cheapest rate* Compounding the prob- 
lem, Investigators, believing that a percentage of 
the apples will be bad, work generally under a 
quota system* That is, they must produce a certain 
percentage of adverse cases* A credit company may 
produce a quota of 20 to 25 reports per investiga- 
tive agent per day, some of which may end up in 
the "adverse" category whether or not they are 
adverse in fact. In light of this, many members of 
the Congress, including the sponsor of the Fair 
Credit Reporting Act, Senator Proxmire, believe a 
legislative overhaul of the system is overdue* 

A related issue is what role, if any, the States 
should play* Since different standards are probably 
needed for the various States, should there be SO 
different State credit reporting acts? Senator 
Proxmire considers Federal legislation as setting 
minimum standards for the States* An example is 
the Fair Credit Reporting Act* In that case, ex- 
perience of the States will be useful at the Federal 
level in convincing Congress that more protective 
and innovative measures can be effective and that 
such measures neither disrupt the flow of credit 
information for business purposes nor hurt the 
economy of the States* Experience in California has 
demonstrated that the Fair Credit Reporting act 
omits important provisions such as adequate ad- 
vance notification to the subject of a credit 
Investigation* In addition, some intrastate busi- , 
nesses require protection for the consumer that the 
Federal bill does not provide* 
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Therefore, the States may well profit from Im- 
plementation of State acts like the Federal Fair 
Credit Reporting Aet even engaging in healthy 
competition with the Federal government Until the 
unlikely time that a perfect Federal bill is developed 
that would iolve ill the problems at once, the 
States should not be preempted in this area. Innova- 
tive and experimental State fair credit reporting 
acts, therefore, do not constitute duplicative legis- 
lation, 

While some panelists saw the profit motive of 
private industry as a safeguard against abuse in 
credit reporting, others saw the profit motive as 
impelling private industry to seek irrelevant in- 
formation. Even procedural safeguards may not 
stop abuse. Perhaps some types of highly personal 
information should be excluded completely by law 
from the scrutiny of an investigator even though it 
may bear some indirect relationship to a person's 
credit-worthiness or insurability, 

A if cent example is the Federal Home Loan 
Bank Board's proposed legislation that would pre- 
vent institutions under its regulatory control from 
collecting data concerning the child bearing inten- 
tions of families. Such information would simply 
be precluded from the permissible data that could 
be used to justify credit decisions. 

The current Fair Credit Reporting Act congas 
no requirements that an individual authorize the 
investigation in advance, A majority of the pane- 
lists agreed that proposed amendments to this act 
or any proposed State fair credit law should be 
predicated upon advance disclosure and consensual 
authorization of the subject. Whether such amend- 
ments should proscribe obtaining certain kinds of 
highly personal information is a separate issue of 
some difficulty because of the problem of precisely 
defining such information. 

The panelists also discussed the issue of how the 
caliber of credit investigators could be improved. 
One panelist contended that professional licensing, 
whatever the form, is not the answer, because such 
licensing is often merely a means for a profession 
to "cartelize" so as to create parties and avoid price 
competition, 
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The core of the problem is the structure of the 
credit reporting industry itself, Pr§ssure§ are so 
great to produce large amounts of Information 
of a broad scope at such small cost that many 
credit investigators will inevitably follow improper 
practices. 

In addition, there are many contributing factors, 
For example, the profit motive may impel a profit 
maximizing company to seek a great deal ©f in- 
formation, perhaps of marginal value, that may 
Involve invasion of privacy, Another factor is that 
some investigators are going to exercise a certain 
amount of natural curlousity* Also, certain unde- 
sirable Incentives are often built into the investiga- 
tion process that may havr: a bearing on an in- 
vestigator's career advances. This is a basic aspect 
of the Federal Trade Commission's case against the 
Retail Credit Company* 

Another issue, the relationship between State fair 
credit laws and the interstate commerce clause, 
was also raised, Much data gathered by credit re- 
porting firms is of an interstate nature, 

A State couldn't completely regulate a credit 
reporting company doing business in another State, 
However, a State could effectively regulate the 
Investigatory process. For example, a State could 
limit the kind of personal information investigators 
seek for specified purposes. 

The subject of mail lists also came up. As defined 
by the panelists, the basic issue regarding mail lists 
concerned advance notification as to the purpose 
and uses for which one's name is on a list Many 
persons buy products or provide information with- 
out realizing that their names may be sold com- 
mercially as a part of a mall list, Solicitations re- 
sulting from the use of such mail lists are considered 
by some to be unwarranted invasions of personal 
privacy* However, others viewed the receipt of 
advertisements and solicitations through the mail 
as constituting an extremely minor form of privacy 
invasion. Most panelists agreed that the problem, 
whatever its extent, could largely be cured by pro- 
viding persons with advance notification as to the 
potential uses of the list* 
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SYSTEMS COST 

AND THE 

ECONOMIC 

IMPACT OF 

IMPLEMENTING 

PRIVACY 

LEGISLATION 

The Chairman, Pr, Willis H. Ware of tht Rand 
Corporation, Santa Monica, California, intro- 
duced the panel of members on systems cost and 
the economic impact of implementing privacy legis- 
lation. The panel members included: Robert 
Caravella of the Federal Trade Commission and 
formerly of the Illinois Department of Finance, 
Jerry Hammett of the Ohio Department of Ad- 
ministrative Services, Peter Herman of thg Vermont 
Department of Budget and Management, and Paul 
Wormeli of Public Systems, Incorporated, Sunny- 
vale, California, A sixth panel member, Walter H, 
Haase, Deputy Associate Director for Information 
Systems of the U, S. Office of Management and 
Budget, had been called away to confer on im- 
pending Congressional passage of the Privacy Act 
of 1974, Dr. Ware presented the statement of the 
panel, which is summarized here, 
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There are no firm data on which to base an estimate of 
the cost of implementing privacy legislation. The cost will 
obviously vary significantly with the specific provisions of 
any proposed measure and with the starting posture of an 
agency, especially with respect to its position on the safe- 
guarding of information. 

The protection of privacy obviously will involve costs, 
perhaps substantial ones, However, we are not facing a 
wholly unprecedented situation, There have been other 
instances where benefits to and protection of our popula- 
tion have required sizable expenditures to cope with the 
problems generated by our technology, e.g. fire rv^fy^an 
and efforts to deal with environmental pollution, fi<v«rt if 
the cost is ai high as several hundred million dollars per 
year, the expenditure of one to three dollars per year for 
each member of our population is neither formidable nor 
preemptive, especially when compared to the corresponding 
figure of about ten dollars per person annually for pollu- 
tion controls. Thus, while we must acknowledge the impact 
of the cost and strive to minimize it by carefully drafted 
legislation and by technical innovation, economic con- 
siderations, in themselves, should not preclude action on 
the privacy front 

In considering various components of cost, it is im- 
portant to distinguish conceptually between the protection 
of privacy on the one hand and computer security on the 
other* 

Protection of privacy is largely concerned with assuring 
that accurate, relevant, and timely information about 
people is used only for stated purposes and in the best 
interests of each individual. It includes giving the in- 
dividual both control over how information about him 
is used and a mechanism for making corrections to the 
record, 

Omipater security (or safeguarding of information in a 
manual system) includes measures that: 

Protect the system— including its physical hardware, its 
personnel, and the data it contains— against either de- 
liberate or accidental damage by a specified threat; 

Protect the system against denial of use by its rightful 
owners; and, 

Perhaps most important for privacy considerations, pro- 
tect information against disclosure to unauthorized users 
of the system. 

While the cost of computer security can, in principle, 
be ascribed to privacy legislation, such an allocation repre- 
sents an inappropriate cost accounting approach. Any 
information system should have safeguards against acci- 
dental or malicious damage or misuse of the information 
it contains, because its very existence indicates that it is 
relevant and critical to the appropriate functioning of the 
organization mat maintains it. Thus, information system 



security should be charged to the basic purpose for which 
the system exists, even though the security measures con- 
tribute to protection of privacy. In systems with well- 
developed security measures, additional requirements for 
privacy protection are likely to be of modest cost, In 
systems witti lax security, greater levels of expenditure 
obviously will be necessary, 

Organizations faced with, implementing privacy policies 
and procedures are likely to behave in predictable ways: 

First, they will automatically resist change in long 

established methods of operating and record-keeping 

procedures, 

Secondly, when changes are required they will utilize 
the opportunity to effect other modifications and im- 
provements that have bee& delayed for various reasons 
and are, of themselves, desirable but have no direct 
bearing on privacy protection. 

As a result of tfcese circumstances, agencies, partly for 
self-protection, will tend to overestimate costs to include r 

Improvements collateral to privacy issues; and 

A sizable contingency margin to deal with uncertainties 
and to allow some bargaining room. 

Thus, in trying to work out the particulars of a bill 
with those who have responsibilities for implementation, 
legislators should clearly and thoroughly analyze and 
dissect agency estimates in order to separate cost elements 
related to privacy, computer security, and/or other types 
of system modifications. Once this is Accomplished, it is 
important to examine tradeoffs between specific provisions 
of a proposed bill and the cost associated with them, 
Small changes in some provisions may have significant 
economic impact, while costs may be relatively insensitive 
to others. 

In the following examples, cost components associated 
specifically with computer security Measures are excluded: 

Cost components that could be relatively insensitive to 
detailed provisions of a bill exclude those related to: 

Requirements for public notice of the existence, content, 
and use of data systems; and 

Personnel training, establishment of methods, adminis- 
trative arrangements, and disciplinary procedures, 

These requirements are fairly fundamental to the 
establishment of a privacy program, and the expenditure 
for them will occur largely only once— at the initiation of 
the program, 

Costs that may vary significantly— even dramatically— 
dependin g on the detailed language of a legislative pro- 
posal, include those related to: 

Recording accesses to a record. Do we record all 
accesses, a statistical sample of them, only those that 
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are exceptions to routine uses of the data, or oniy 
those that become of special interest, perhaps be- 
cause some record suddenly has many accesses to it? 

Notice of corrections that an individual makes to his 
record, Do we send notice of the correction to all 
past recipients of a record, all recipients within the past 
two months, one year, five years, or do we only 
amend the record so that all future recipients will 
have the corrected data? For some systems, such as 
those dealing with criminal Justice information, 
should we send notice of corrections to all past re- 
cipients with less stringent procedures for handling 
corrections in other types of systems? Do we send 
corrections only at the request of the data subject 
and then only to the past recipients that he specifics? 

Requirements for purging records. Does this mean 
actual destruction of a particular record in a com- 
puterized system at a specified time? If so, it m likely 
to be more expensive than simply blocking all dis= 
semination at a stated time with actual removal of 
the record later at a more economically-advantageous 
moment 

Estimating the cost of implementing privacy legislation 
is obviously intensified by our inability to judge accurately 
the level of activity to which a record-keeping system will 
have to respond. 

For example, what proportion of the data subjects in a 
record system will request access to their records? What 
proportion of those accesses will require amendment to 
records and notices to prior recipients of information? 
The experience of one organisation in the consumer credit 
field indicated a substantial initial impact when the pas- 
sage of the Fair Credit Reporting Act provided tnpmdtd 
opportunities for consumers to challenge their credit flies. 
The comparability of this experience to demand* by data 
subjects for, access to state and local government records 9 
about themselves is difficult to estimate but it is probably 
realistic to anticipate at least an initial surge, of requests. 

The cost of implementing privacy legislation cannot be 
accurately measured, particularly where thera is a lack 
of dependable information on the number and kinds of 
record-keeping systems in a particular jurisdiction, and 
the uses made of them, However, rough estimates based 
on some data pertaining to the Federal sector indicate 
that the economic impact, while real, is not unaccept- 
able. 

It is possible to identify specific provisions of proposed 
legislation that could lead to rapid cost escalation and 
others for which implementation costs could be reason- 
ably determined and controlled. 



Legislators, in working with agencies on the formula 
tion of a bill, should insist upon cost breakdowns that 
relate projected expenditures to specific requirement* of 
the legislation, This approach could reveal proposed 
system applications that are not directly related to 
privacy concerns, Existing capabilities in information 
technology are adequate to develop cost breakdowns 
that are accurate enough, according to specific features 
of a bU, 

The absence of privacy legislation can entail actual 
monetary as well as social costs. With adequate privacy 
safeguards, some consolidation of record systems with 
attendant economies of scale would be palatable. 

Some activities associated with implementing privacy 
legislation may be more difficult to accomplish with a 
manual record-keeping system than with a computerized 
one, and vice versa. Proposed legislation may have to 
distinguish between treatment of records in these two 
types of systems, raising additional cost considerations. 

Data that have not been collected cannot be abused. 
Consideration of privacy legislation provides an oppor- 
tunity to review a state or local government's authority 
for collecting personal data and to weigh the social value 
of maintaining certain types of information against the 
feasibility and cost of instituting appropriate privacy 
safeguards, 

Similarly, the cost to safeguard recordkeeping systems 
will depend upon resolution of qu&^ons of social policy, 
e.g. decisions to establish socially acceptable ways of 
using existing data* For example, if It is appropriate 
from the standpoint of social policy to combine data 
about welfare recipients with tax records to monitor 
abuse, then cost savings might h* realized thrown ap- 
plying safeguards to a single system of records rather 
than to two separate ones. 

In view of the many uncertainties surrounding economic 
aspects, it may be cost-advantageous to have privacy 
legislation that authorizes substantial use of adminis- 
trative rulemaking for establishing specific implementa- 
tion procedures, The regulatory approach certainly 
should provide greater flexibility for effecting improve- 
ments identified by experience than the legislative or 
judicial routes. 

Similarly, it might be wise to begin with a legislative 
proposal that specifically does not attempt to solve all 
problems involved in Hie protection of personal privacy 
at once. Initial legislation might be regarded as a basis 
for learning, with a stipulated agreement that it will- 
be amended in relevant ways, as experience dictates. 
Thus, a privacy bill should include provisions for feed* 
back of operating information and periodic assessment 
of the program's cost and effectiveness as it progresses. 
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During the brief period for questions and com- 
ments, the following points were made: 

A question from the floor inquired about the availability 
of data associated with implementing the Fair Credit 
Reporting Act provision that permits a consumer to 
challenge infoi motion in his credit file. Replies from 
the panel indicated that dependable data of this kind 
are difficult to obtain, probably |?eeause of the credit 
industry's sensitivity to questions about the accuracy of 
their records and also because of the proprietary nature 
of the information. It was suggested that the Federal 
Trade Commission may have materials on the cost of 
administering the Act 

In response to a request for reference materials that 
would assist reeord-keeping organisations in estimating 
costs related to privacy and security measures, a docu- 
ment prepared as part of the IftM/Siate of Illinolo 
Project SAFE effort was mentioned, The publication, en 
titled The Elements and Economics of Information 
Privacy and Security, contains a checklist of cost con- 
siderations. Possibly an interested Organization, such as 
the National Association for State Information Systems, 
would be willing to prepare a bibliography that pulls 
together documentation on cost issues from various 
sources. Also, there is a need for a similar effort to 
develop a set of uniform definitions of terms related to 
privacy and security matters. Such a compilation would 
enhance communication among all those involved in or 
affected by privacy legislation and programs, 

Another £ost consideration relates to problems that 
could result ^ ^ different or conflicting provisions of 
privacy star r%j S jurisdictions, e,g, in instances 

where v^rt >.;>h* ^ sjay ^e appropriately transferred 
across v^\U\ 

Conceit *wb '.xpressed that both public and private 
sector organizations woul'd withhold or delay new or 
improved services to consumers because of the costs 
of safeguarding personal data systems, Panel members 
felt thai it was more likely that thg costs would fee 
passed on to the public/consumers in the form of in- 
creased taxes or, in the private sector, higher prices, 
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A STRATEGY FOR 
COOPERATIVE 
FEDERAL-STATE- 
LOCAL PRIVACY 
PROGRAMS 



A panel organized from among the participants 
made recommendations, which resulted from the 
discussions and proceedings of the Privacy Seminar, 
for a strategy pointing toward cooperative Federal- 
State-local privacy programs, Serving with Panel 
Chairman Lee M Thomas, Executive Director of 
the South Carolina Office of Criminal Justice, 
were Indiana Representative Kermit Burrous; 
Assistant Attorney General Alan MacDonakl of 
Massachusetts; Michigan Senator Robert Vander 
Laan; Howard Kaiser, Director of Data Processing 
for the State of New York; Mayor Tom Cloddy of 
Columbus, Ohio; Ffeddye Petett, Administrative 
Assistant to the Mayor of Portland, Oregon; Justice 
Robert Utter of the State of Washington; and Cali- 
fornia Assemblyman William Bagley, 

Meeting in plenary msion, the Seminar partici- 
pants considered and rv td several of the panel 
recommendations, The ^ /oel suggested that these 
be given wide dissemination along with the working 
papers and summary record of the proceedings, 
The following recommendations were adopted: 




82 



77 



ATION 



be forgotten or reduced 
here is an overwhelming 
operative impUmentalion 
mining amono Federal, 

should be established for 

Sovernor should call for 
confidentiality to provide 
by executive, legislative, 
iders. From such a con* 
bvelop its own unique 
>f privacy programs, 

be recognized and dealt 
ate legislative programs, 
lent at any Governor's 
fidentiality. 

id effort by State and 
jst groups to develop a 
icy issues arc addressed 
iiis effort should include 
cal governments to de- 
privacy in concert with 

on and the provision of 
y programming should 
the Domestic Council 
rivacy and appropriate 
ing bodies. 




Appendix I 



PRIVACY— A PERSPECTIVE 
by Alice McGarty • 



The protection of personal privacy has emerged 
as a major public policy issue largely within the 
past decade, A brief look backward, nevertheless, 
reveals numerous instances of earlier expressions of 
concern by legal authorities and articulate spokes- 
men of both the public and private sectors of our 
society about the invasion of individual privacy. 

As far back as 1879, Judge Thomas M, Cooley in 
his Treatise on the taw of Torts wrote of a person*s 
"right to complete immunity: to be let alone," An 
article published in the Harvard Law Review in 
1890 by Samuel D. Warren and Louis D* Brandels, 
entitled "The Right to Privacy," has become a 
classic and pe^aps is the most often quoted as an 
example of eariy interest in this subject The authors 
wei£ concerned about non-governmental threats to 
privacy exemplified by a new form of "record-keep- 
ing" in their day — photography — and the rights 
of individuals to sue if they felt their privacy had 
been invaded. In 1927 Brandeis, then a Justice of 
the Supreme Court, in a dissenting ion in 
Olmstead v. United States wrote that "ev^y unjusti- 
fiable intrusion by the Government upon the privacy 
of the individual, whatever the means employed, 
must be deemed a violation of the Fourth Amend- 
ment." 

In the first half of the 20th century, the rapid 
development and use of information-gathering and 
surveillance devices and of such tools for persona] 
assessment and analysis as personality tests and 
polygraphs prompted occasional protest from public 
officials, aggrieved individuals, and the press. How- 
ever, it was not until the mid-1960s that the loss 
of personal privacy became a matter of widespread 
concern. This fear resulted from such factors as: 

Government demands — appropriate or not — 
for more information about Individuals to carry 
out its planning, programming, budgeting, statis- 
tical, research and analytical responsibilities; 

Burgeoning private sector activities in research, 
market analysis and procedures for handling 
economic transactions— involving financial instt- 

* Alice McCarty ia Director of Research ,„•>■- {he Domestic Council 
Committee on the Right of Privacy, 



iutioiis, consumer-reporting agencies, the credit 
card industry, and insurance organizations; 

Evidence that the social security number and 
other type* of personal identifiers could be or 
were used to compile, check, and cross-reference 
personal data in ways unexpected by and often 
unknown to the individuals involved; 

The inability of individuals to determine readily 
what records were kept about them, who had 
access to the records and for what purposes, and 
whether the records were accurate; 

The impact of modern information processing 
technology with its capabilities to handle, pro- 
cess, store, manipulate and combine data in 
countless ways, and at almost incomprehensible 
speed. 

About the same time — the mid-1960s — a 
Federal proposal for a National Data Center was 
abandoned after press and public outcries about its 
potential as a first step toward George Orwell's 
1984 — and numerous law review, journal and 
newspaper articles, as well as popular books like 
The Naked Society and The Privacy Invaders — 
began to appear. In 1967 Alan F* Westin, Pro- 
fessor of Public Law and Government at Columbia 
University, published Privacy and Freedom, a de- 
tailed treatment of the historical, legal, political, 
and sociological aspects of privacy. This was fol- 
lowed over the next few years by a number of other 
studies and publications wtoch have helped to focus 
public attention on pers^i _\* privacy issues, includ- 
ing On Record; Files and Dossiers in American 
Life, 1969, edited by Stanton Wheeler; Arthur 
Miller's Assault on Privacy, 1971, and James B, 
Rule's Private Lives and Public Surveillance: Social 
Control in the Computer Age, 1974,* 

Particularly deserving of mention are two land- 
mark studies completed in the early 1970s, Data- 
banks in a Free Society, the report of the National 
Academy of Sciences* Project on Computer Data- 
banks, 1972, by Alan Westin and Michael Baker, 

* These and other important reference documents are included on 
the Reading Lilt (Appendix V). 
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pointed out that the computer's new capabilities had 
not yet led inevitably to major changes in ot^zm* 
zational patterns of information gathering, manipu- 
lation or dissemination; in computerizing their files, 
organizations — public and private — had general- 
ly adhered to their traditional admlnistrativepolicics 
on the handling of data. However, computers had 
brought about a dramatic expansion of information 
networks with attendant implications for the in- 
vasion of privacy; thus, the time had come to con- 
sider new legislative, administrative and judicial 
measures to define and assure rights of privacy and 
due process. 

The second study was sponsored by the U. S. 
Department of Health, Education and Welfare and 
conducted by the Secretary's Advisory Committee 
on Automated Personal Data Systems, In its report, 
Records, Computers* and the Rights of Citizens, 
1973, the Committee concluded that It was im- 
portant to implement a concept of mutuality be- 
tween record-keeping entities and data subjects. It 
recommended that record-keeping organza tlons ad- 
here to five fundamental principles of fair informa- 
tion practice — concepts that have had a major 
impact on many privacy efforts since undertaken. 

During the 1965-72 period, privacy concerns 
gained considerable visibility i: ingress with con- 
sideration given to proposals d- j with such sub- 
jects as the regulation of Fc data banks, sur- 
veillance methods of the mi g y - Federal law 
enforcement agencies, commercial credit brraaus, 
census questions, unsolicited mail, and the p. ,acy 
of Federal employees, During this period Congress 
enacted two major laws that addressed direcdy the 
question of personal privacy — the Omnibus Crime 
Control and Safe Streets Act of 1968, which con- 
tained provisions to limit the legal use of wiretaps, 
and the Fair Credit Reporting Act of 1971, The 
latter established procedures whereby an individual 
can be informed of the nature and substance of 
information maintained about him by a consumer- 
reporting agency and can take action to amend his 
record, (Amendments to strengthen the presently 
limited safeguards In the Act have been introduced 
in the 94th Congress,) 
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The 93rd Congress has been called the "Privacy 
Congress," principally because approximately 250 
bills were introduced between 1973-74, relating 
both to thr issues mentioned above and to others 
such as >: al justice information, bank records, 
social ser numbers, health records, income tax 
returns, and telephone communications, That Con- 
gress enacted two major privacy measures — the 
Family Educational Rights and Privacy Act of 1974 
(P.L, 93-380) and the Privacy Act of 1974 (P.L, 
93-579), 

The former, often referred to as the Buckley 
Amendments, permits parents to have dmrw to 
school records about their children fr,?r! OT^nts 
over 18 have access to such records atoui them- 
selves), and sharply limits the disclosure of school 
record information to outside parties, 

The Privacy Act of I974 f effective September 27, 
1975, establishes individual righ'n rwvJ agency obli- 
gations with respect to personal datu in systems of 
records maintained by Federal agencies. It requires 
each agency to publish an annual notice describing 
each system under Its control from which infor- 
mation about individual* Is retrieved in identifiable 
form; to meet certain conditions for disclosing 
personal information without the data subject's con- 
sent; to establish procedures whereby an individual 
may review and challenge information in a record 
about himself; and to limit its record-keeping to 
information necessary to accomplish an agency 
function required by law or Presidential order. 

Further, ihe Act places a moratorium on the 
authority of Fec ial, State, and local government 
agencies to compel an individual to disclose his 
social security number unless required by Federal 
or State statutes, or by Federal or State regulation 
adopted prior to January 1, 1975, in connection 
with the operation of an existing record-keeping 
system. The Act also establishes a Privacy Pro- 
tection Study Commission to review and analyze 
a wide range of issues related to personal privacy, 
including the need for Federal legislation applicable 
to State and local government records and records 
maintained by private organizations, (See Appendix 
XVII for further discussion of the Privacy Act,) 
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During the last S^ssk^i of that "Privacy Con- 
gress," in aarly 1974, the President established the 
Domestic Council Committee on the Right of 
Privacy under the chairmanship of the Vice Pres- 
ident* Its members are the Secretaries of the De- 
partments of the Treasury; Defense; Commerce; 
Labor; Health, Education and Welfare; the At- 
torney General; and the heads of 5 additional 
agencies — the Office of Management and Budget, 
the Civil Service Commission, the Office of Con- 
sumer Affairs, the Office of Teiecommunicailons 
Policy, and the General Services Administration 
The Committee's charge is to consider and recom- 
mend prompt action to assure a proper balance 
between the record-keeping capacity of public and 
private organizations and the individual right to 
privacy. Wiretapping and electronic surveillance is 
excluded from the Committee's broad mandate since 
those subjects are currently under study by the 
National Commission for the Review of Federal 
and State Wiretapping Laws, 

To achieve its objectives the Committee was 
made responsible within the Administration for 
developing and coordinating agency views, policy 
recommendations, and specific legis tive and ad- 
ministrative initiatives that affect the way informa- 
tion about individual Americans is collected, re- 
corded, used, and disseminated. 

The Committee has endorsed initiatives in such 
areas as military surveillance of civilian political 
activities, criminal justice information, electronic 
funds transfer systems, the confidentiality of tax- 
payer records, Federal mail lists, customer records 
in financial institutions, Federal employee rights, 
and serurky guidelines for Federal computers and 
communications systems, Its staff has worked with 
interagency task forces, individuals and groups 
outside the Federal Government, members of Con- 
gress, and Congressional Committee staffs toward 
the implementation of these initiatives and others 
reflected in provisions of the Privacy Act and the 
Buckley Amendments. Current projects are con- 
cerned with the need for a Federal policy on the 
use of the Social Security number as a personal 
Identifier and the need for strengthened privacy 



safeguards k employee records, health records, 
welfare records, and statistical and research data, 

Other recent activities at the Federal !eval with 
implications for personal privacy include two Ex- 
ecutive orders to limit Agriculture Department and 
White House access to Federal tax return forma- 
tion and the establishment of national study com- 
missions on electronic fund transfers. Federal 
paperwork, md the publication of human research 
subjects. 

Much of the concern about and action on privacy 
issues has been at State and local government levels 
and in the private sector, Many State statutes and 
regulations as well as local ordinances, some of 
which have been on the books for many decades, 
pertain to the collection, dissemination and use of 
personal data. Laws concerning medical and school 
records are the most common, while others deal 
with criminal Justice information, the use of wire- 
taps and polygraph tests ? bank records, cfeJit 
transactions, and public assistance records, Min- 
nesota, Utah, and Arkansas have fair information 
practice laws that limit the collection and use of 
personal data maintained by state agencies, require 
notice of the kinds of personal data maintained by 
the State, and provide individuals an opportunity 
to review and, where necessary, correct records 
about themselves, Minnesota has recently amended 
its initial statute after almost a year of operating 
experience. In May 1974, Oklahoma enacir-* a 
statute to prohibit new uset of the Social Security 
number by State agencies. More than 100 privacy- 
related bills were introduced in State legislatures 
during 1974, with about 85 measures proposed at 
this writing In 1975, 

In addition, at least seven States have established 
special commissions or boards to study privacy con- 
cerns within their jurisdiction and to examine the 
need for new State laws or other actions to protect 
personal privacy. 

In the private sector, many business and social 
science organizations and professional/ technical 
groups have demonstrated leadership in efforts to 
safeguard personal privacy. They have implemented 
policies on record-keeping that protect their cm- 
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ployees, customers, or members and have sponsored 
studies, conferences, and publications on various 
aspects of the privacy issue. Examples include a 
six-volume study on data security carried out at 
four study sites with the support of the IBM Cor- 
poration; a national conference on the confidentiali- 
ty of medical records sponsored by the American 
Psychiatric Association and other health organisa- 
tions; and the voluntary adoption of codes of con- 
duct by some associations representing the informa- 
tion processing disciplines. 

Private organizations as well as public agencies 
necessarily are devoting increasing attention to the 
economic impact of modifying record-keeping 
practices and applying the privacy safeguards and 
security measures that are being mandated or re- 
commended through legislation and administrative 
or voluntary action, A few studies and analyses of 
cost issues are becoming available, including Robert 
G Goldstein's The Cost of Privacy; Operational 
and Financial Implications of Databank^Privacy 
Regulation (Boston, Mass.* Honeywell Information 
Systems), 1975, and a publication of the State of 
Illinois-IBM Corporation's Project SAFE, entitled. 



The Elements and Economics of Information Pri- 
vacy and Security (Springfield, Illinois: State of 
Illinois, Project SAFE), 1974, 

Every indication is that privacy issues will con- 
tinue to occupy a place of prominence with the 
American people and that efforts to regulate the 
collection, maintenance and use of personal data 
will accelerate, At this writing, pending in the Con- 
gress are nearly 100 bills concerning such issues as 
criminal justice information systems, the disclosure 
of data on taxpayers to third parties (including 
other government agencies), investt Cory access to 
bank records, and the surveillanvc d citizens by 
military and civilian agencies. As mentioned above, 
nearly as many have been introduced in the 1975 
sessions of State legislatures, Privacy-related activi- 
ties of private organizations continue to expand in 
anticipation of go/ernmenta! action to control 
record-keeping practices in that sector. Experience 
gained under the Privacy Act of 1974 and similar 
State fair information practice laws and the findings 
of the Privacy Protection Study Commission un- 
doubtedly will have a major impact on future legis- 
lation, administration, and voluntary initiatives, 
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GLOSSARY OF FREQUINTLY 
ENCOUNTERED TERMS 



Personal privacy and related concepts, such 
as confidentiality and data iecnrity ? lack stable 
definitions, particularly as they relate to the han- 
dling of recorded information. Progress in defining 
the fcgai, technical and administrative implications 
of privacy safeguards policy has been su* passed by 
computer and communciations technology advances 
that eradicate barriers of time and distance in infor- 
mation processing. Therefore, without claiming 
finality and conclusiveness of definition* this glos- 
sary attempts to describe various current meanings 
assigned to terms frequently encounterd in discus- 
sions of personal privacy issues, 

Peramal Privacy: This is a concept having constitutional, 
common law, and social psychological roots. As con> 
manly used, it may connote: (1) substantive rights, 
stemming from specific legislative enactment and court 
rulings, e.g., the physician-patient privilege, the Supreme 
Court rulings on abortion and contraception, the com- 
mon law remedies against malicious libel and slander, 
and the misuse of an individuals name or likeness; (2) 
a value judgment , e, g„ a conviction about the extent to 
which government should regulate or inquire into 
private conduct; or (3) due process guarantees, e, g,, 
the 4th Amendment requirement of warrants prior to 
seizure of personal property. 

Fair Information Practice Principles: These are basic 
premises that seek to assure iSzt individuals, solely or 
collectively, are able to influence when, how, and to 
what extent information about them will be collected, 
maintained, used, and disseminated by record-keeping 
organizations, Basic premises with respect to government 
record-keeping operations include the following: 

An agency should collect only personal information 
that is necessary for the performance of functions 
authorized by law, 

An agency should advise the individual of the purpose 
for which personal information about himjs collected 
and of any consequences of providing or not provid* 
ing the information. 

An agency should peUodicaily give public notice of 
the existence and character of systems of records 
containing personal information, 

Unless authorized to the contrary for sound public 
policy reasons, an agency should permit an in- 
dividual to have access to his record and to chal- 
lenge Its accuracy, relevance, timeliness and com* 
plefmess. 



An agency should adopt restraints on the disclosure 
of personal information that are conditioned by con- 
siderations of the purpose for which information 
was collected* 

An agency should maintain personal Information with 
such accuracy, relevance, timeliness and completeness 
as is necessary to assure fairness in any determina- 
tion affecting an individual's rights and benefits. 

An agency should take reasonable precautions to 
assure the security and integrity of personal Informa- 
tion against damage, misuse, theft and loss. 

Personal Information (or Personal Data); This term 
often encompasses all information that describes any- 
thing about an individual, such as identifying char- 
acteristics, measurements, or test scores; evidences 
things done by or to an individual, such as records of 
financial transactions, medical treatment, or other ser- 
vices; or affords a clear basis for inferring personal 
characteristics of things done by or to an individual, 
such as the mere record of his at her presence in a 
place, attendance at a meeting, or contact with some 
type of service institution. iVwher and somewhat 
more restrictive definition would he any information that 
is or can be retrieved from a record or record-keeping 
system by n^rence to the name, number or some other 
identifying ature (e*g„ fingerprints) associated with 
the individual to whom the information pertains. 

Confidentiality: TIM is a loose concept that minimally 
connotes some commitment to withhold from unauthor- 
ized users informttbji obtained from or about an in- 
dividual or Irisflf* \i:mi some cases, the subject of the 
information r : N ^fcered an unauthorized user; 
in ethers, tK* rnhv^- iJk authorized users may be 
broadly described Cimy State agency 1 *) or redefineable 
at the discration o£ the holder of the information 
("whomsoever the Secretary shJI designate H ), A prin- 
cipal objective of recent privacy legislation has been 
to give the concept of confidentiality an operational 
meaning, e,g„ by requiring that the authorized users of 
information be Kltkitified in a public notice or in a 
statement to date subjects at the time of data collection, 

Date Scorify? This is a descriptive term that connotes 
the degree and means by which information and the 
machines and facilities for processing, storing and trans* 
mitt ing it are protected from loss and unauthorized 
access or modification. 

Data Linkage: This refers to die combining, cross refer* 
eneing, or comparison of information in two or more 
records, 

Administrative Record: This is any personal information 
preserved by an organization for future use or reference 
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that is or may be used to make a decision about the 
rights, character, opportunities, benefits, or liabilities of 
the individual to whom it pertains. 
Statistical Reporting or Research Record: This refers to 
personal information maintained by an organization 
solely for analytic purposes and which, therefore, is not 
used and may not be used to make a decision about 
the rights, opportunities, benefits, or liabilities of the 
individual to whom it pertains, 
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AGENDA 



Seminar on Privacy Cosponsored by the Domestic 
Council Committee on the Right of Privacy and the 
Coiinci! of State Governments 

December 16*17, 1974 



Monday, December 16 

9:00 - 9:45 a,m. Plenary Sessions— Welcome, Discussion of Seminar Objectives, 

Orientation to Seminar Format 

10:00- 12 Noon Mock Legislative Committee Sessions to Consider Draft Privacy 

Legislation Pertaining to: 
L State and Local Government Data Banks 

2. Public Employee Records 

3. Criming? Justice Information Systems 

12:15 - 1:30 p.F7> Luncheon— Speaker: Dr. Alan F, Westin, Professor of Public Law 

and Government, Columbia University 

1 :30 - 3:45 p.m. Mock Legislative Sessions Resume, Concluding with Summary of Views 

Expressed and Recommendations Developed 

4-v/O - 5:30 p.m. Plenary Session— Panel Discussion on Consumer Privacy Interests 



Tuesday, December 17 



9:00- 12:00 p.m. Plenary Sassion 

9:00 - 10:00 Reports imm Legislative Scions— Discussions 

10: 15 - 11:00 Panel on Systems Cor K n impact of 

Implementing Pnvar 

1 1 :Q0 » 12 Noon Presentation of an ImpIemenipMon b- . or 

Cooperative Federal-State- ^scal Privacy Programs 

12:15 p.m. Luncheon— Speaker: Assemblyman William Bagley, California 

2:00 p.m. Adjournment 
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ATTINDANCE LIST 



Seminar on Privacy 

Decer-ibtr 1&-17, 1974 
Mayflower Haiti 



Alaska 

Reprensctadva William Park?.' 
Senator Bill Ray 

Arizona 

M jor Frank Kessler 
Tucson Police Department 
Senator John Roeder 

California 

Chief Deputy Attorney General 
Charles A, Barrett 

Larry Bolton 
Legal Counsel 

Office of Criminal Justice Planning 

Deputy Attorney General 
Michael Franchetti 

Terry Hatter 

Executive Assistant to the Mayor 

O. J, Hawkins 

Executive Director 

Search Group, Imdf /ated 

Allen Lew 

Seth Thomas 
Assistant Director 
Department of Justice 

Jack Walsh 

Supervisor 

San Diego County 

Delaware 

Norma Handloff 

Executive Director 

Delaware Agency to Reduce Crime 

Florida 

James B, Uftberhorst 
State Court Administrator 

Georgia 

Walter Boles 
Director 

Georgia Crime Information Center 
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Aiii 'S Soutfier!and f Director 
htfvjWmti&n Computer Services Division 
D^punmvAi cf Administrative Services 

Fred K. Grant 
Court Specialist 

Law Enforcement Planning Commission 

Illinois 

Allen Flaum 
Executive Director 

Governor's Commission on Personal Privacy 
Jeff Goldsmith 

Special Assistant to the Director 
Bureau of die Budget 

Gary McAIvey 
Chairman 

Search Group, Incorporated 
Indiana 

Reperesentative Kermit Burrous 
Michael Carroll 
Deputy Mayor 
Indianapolis 

Chi^* Judge James Richards 

Raymond W. RJzzo 
Executive Assistant 
Office of the Governor 

Iowa 

Representative Philip Hill 
Kansas 

Representative Don Everett 
Representative Richard Loux 

Kentucky 

George A, Ball 
Staff Assistant 

National Association of State Budget 
Officers 

Council of State Governments 
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Dr, Jack D, Fustei 
Project Director 

State's Ctimhu l Justice Information and 
Assistance Project 

Richard E. r^ers, Jr. 
Director 

Division for Management Systems 

Charles Trigg 
Assistant Director 

National Association of State Information 
Systems 

Carl Vorlander 
Executive Director 

National Association of State Information 
Systems 

Louisiana 

Speaker E. L. Henry 
Mafati 

Charles Acker 
Director 

Mental Health Information Project 

Maryland 

Larry N, Blick 
City Manager 

Jane Cerza 
Special Assistant 
Office of the Governor 

Carl Bverstine 
Director 

Department of Legislative Reference 

Delegate L Hugh Nichols 

Richard Werte 
Executive Director 

Governor's Commission on Law Enforcement 
Chad Young 
Special Assistant 
Office of the Governor 

Massachusetts 

Nancy French 
Computerwortd 



Robert R, J. Gallati 
Professor 

Northeastern University 

Alan MacDonald 
Assistant Attorney General 

Michigan 

Einar Bohlin 

Supreme Court Administrator 
Representative Perry Bullard 

Glenn Goodman 
Director 

Bureau of Management Sciences 

Thomas F, Taylor 
County Commissioner 
Wayne County 
Senator Robert VanderLaan 

Minnesota 

Richard L* Brubscher 
Commissioner of Administration 

Representative John Lindstrom 

Richard F, Sherman 
Director 

Pretrial Services 

Senatoi Robert Tennessen 

Missouri 

Robert Gryensf elder 
Executive Director 
MLEAC 

Gaiy Rath 
Consultant 

EDP Coordination Division 
Office of Administration 

ChErles Sehaffer 

State Information Systems 

Senator J6hn Cavanaugh 
Senator Roland Luedtke 
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New Jersey 

Hubert Williams 
Police Director 

New York 

Judge Benjamin Altman 
Executive Director 

Mayor's Criminal Justice Coordinating 
Council 

Rheta Bank 
Director 

Educational Services 
Rockland Research Center 

Commissioner Donald Bardell 
Department of Motor Vehicles 

Jack David, Esquire 

H Howard Kaiser 

Director 

Data Processing 

Kenneth D. Molloy 
Coordinator 

Office of Federal and State Aid 

Martin F. Riehman 
Chairman 

Committee on Federal Legislation 

North Carolina 

Bill Biggers 

Administrative Assistant to the Secretary 
Department of Administration 

Bruce Lentz 
Secretary 

Department of Administration 
Bruce Merrett 

Manager of the ADP Planning Section 
Department of Administration 

Donald R, Nichols 

Administrator of Law and Order Division 
Department of Natural and Economic 
Resources 



Ohio 

James B, Memanama 
Manager 

Data Processing Center 

Tom Moody 
Mayor of Coiunrha? 

Oklahoma 

Senator Jerry V*v",c 

Oregon 

Senator Elizabeth Browne 
Duke Morton 

Manager of Program Evaluation 
Department of Human Resources 

Freddye Petett 
Administrative Assistant 
Office of the Mayor 

Pennsylvania 

Deputy Attorney General Morris Solomon 

Rhode Island 

Steve Cohsn 
Intern 

Policy and Program Review 

Oliver L. Thomson, Jr. 
Administrative Assistant 
Legislative Affairs Council 

South Carolina 

Lee M, Thomas 
Executive Director 
Office of Criminal Justice 

South Dakota 

Representative Dennis MacFarland 

Tennessee 

Robert W, Chaffin 
Director 

Division of Intergovernmental and 
Employee Relations 

Joan Vollmer 

Deputy Commissioner of Personnel 
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Terns 

William E, Roberts 
Director 

Information Systems Department 

Dick Strader 

Senate Research Staff 

Viifbria 

Roberta Colbertson 

Special Assistant 

Cabinet of the State of Virginia 

Samuel A* Finz 
Director 

Office of Research 

Senator Joseph V, Gartlan, Jr. 

Douglas Harman 
Deputy County Executive 

Bart Johnson 
County Manager 

Howard Middleton 
Assistant City Attorney 

Ben War© 

Computer System Development 
Office of Research 

Washington 

Saul Arrington 
Administrator 

Law and Justice Planning Office* 
Justice Robert Utter 

West Virginia 

Delepte Phyllis Given 

Wisconsin 

Representative Lloyd A* Barber 

Lawrence Barish 
Research Analyst 
Legislative Reference Bureau 



?£'agftington, B.C. 
Joseph Alviani 
General Counsel 
National Conference of State 

Criminal Justice Administrators 
Lany Bailey 

Assistant Executive Director 
U, 5, Conference of Mayors 

Bariwa Bayly . 

Executive Assistant to Congressman Koch 

Louise G. Becker 
Analyst in Information Science 
Congressional Research Service 
Library of Congress 

Robert L, Chartrand 
Spccte'j'st in Information Service 
Congressional Research Service 
Library of Congress 

Stepli i M. Daniels* Minority Counsel 
Government Operations Committee 
U. 3. House of Representatives 

James H. Davidson 
Counsel 

Ctavernment Operations Committee 
U, S, Senate 

William R, Drake 
Program Admmmirator 
Criminal Justice 

S, Conference of Mayors 

Margery Elfin 

National Wiretap Commission 

Jeff*^ L, Esser 
Administrative Assistant 
National Conference of State Criminal 
Justice Planning Administrators 

Ed Gallagher 

National Wiretap Commission 
TTiomas Graves 

Special Assistant for Intergovernmental 

Relations 
Office of Management and Bm%et 
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Chief Judge Harold Greene 
Superior Court 

Alice Grisham 
Information Coordinator 

David Guarino 
Governors Intern - Texas 

Marilyn Hants 
Professional Staff Member 
Government Operations Committee 
U, S. Senate 

Tim Honey 

Legislative Counsel 

National Association of Counties 

Jerry Hutton 

Concessional Research Service 
Library of Congress 

Samuel Laudenslaggr 
Assistant Deputy Project Director 
Criminal Justice Section 
American Bar Association 

William Lytton 

Counsel to Senator Percy 

Anthony McCann 
Ctfntib.-* Justice Specialist 
Nattenci Association of Counties 

Earl -i 4 Maekey 
Executive Director 

National Conference of State Legislatures 

Arnold Malech 

Executive Officer 

District of Columbia Courts 

Ronald J. Nolfi 
Director 

Statistical Analysis Center 

Vincent Puritano 
Intergovernmental Relations and 

Regional Operations 
U, S* Office of Management and Budget 



Dark Renninger 

Staff Assistant 

Institute for Computer S/T 

National Bureau of Standards 

Erwin S, Rhodes 
American Bar Association 

Ronald Tucker 

Counsel to the Criminal Justice Project 
U, S, Conference of Mayors 

Dcn^d Newman 
Director 

Indiana Washington Office 

RESOURCE PERSONS 

Ciumnal Justice Information SVstims 

S?5JION 

*?£ttiiniifiii 

Miorney General Robert H, Quinn 
Commonwealth of Massachusetts 

Witnesses 

Mr, Richard N. Harris 
Director 

Division of Justice and Crime Prevention 
Commonwealth of Virginia 

Mr. Edward J, Kelly f Attorney 
Whitfield, Musgravu, Selvy, Kelly & Eddy 
Des Moines, Iowa 

Chairman of the Iowa State Bar Association 
Special Committee on Traffic Records and 
Criminal Information Systems (TRACTS) 

Mr* Thomas Madden 
General Counsel 

Law Enforcement Assistance Administration 
U. S. Department of Justice 

Mr, Archibald R, Murray 
Commissioner 

Division of Criminal Justice Services 
State of New York 
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General State And Local Government 
Data Banks Session 

Oi&irataH 

Senator Stanley J, Aronoff 
State Senator 
State of Ohio 

Witnesses 

Representative William R* Bryant, Jr. 
House of Representatives 
State of Michigan 

Assemblyman Mike Cullen, Chairman 
Assembly Committee on Efficiency and Cost 

Control 
State of California 

Mr, Daniel B* Magraw 
Assistant Commissioner 
Departraect of Administration 
Strte of Minnesota 

Marjorie Eltaoth 
Executive Director 

Governor's Commission on Privacy and 

Personal Data 
Commonwealth of Massachusetts Representing 

Governor Francis W, Sargent 

Public Employees Records Session 

Chairman 

Em Plant* M> D, 
Deputy Commissioner 
Department of Mental Health 
State of Indiana* 

Witnesses 

Mr, Gary D* Bearded* Director 

Bureau of Manpower Information Systems 

U. S* Civil Sarviee Commission 

Mr, Harry B, Douglas, Jr, 

Equal Employment Opportunity Coordinator 

State of Florida 

Mr, Sheldon Mann, Economist 
Research Department 
American Federation of State, Owr«iy t 
and Municipal Employees 



Consumer Interest Panel 
Chairman 

Mr, S, John Byington 
Deputy Director 

U. S, Office of Consumer Affairs 
Panelists 

Mr, Joseph L, Gibson, General Attorney 
MARCOR (parent organization for Montgomery 
Ward & Co.) 

Mr, Theodore Jacobs, Executive Director 
Center for the Study of Responsive Law 

y>>\ John Kehoe, President 
^nsiimer Concerns, Ine, 
Sacr& uiento, California 

(formerly Director of the Department of Consumer 
Affairs, State of California) 

Mr, Kenneth A* McLean 
Professional Staff Member 
Committee on Banking, Housing 

and Urban Affairs 
United States Senate 

Mr. Peter Pryor, Chairman 
New York Staie Consume 
Protection Board 

Mr. Peter Schuck 
Director, Washington Office 
Consumers Union 



Panel On Systems Cost And Economic 
Impact Of Implementing Privacy 
Legislation 

Chairman 

Dr. Willis H. Ware 
Corporate Research Sittt 
The Rand 
Santa Mors* 

Panelists 

Mr, Robert Cairaveiis 
Information Systems Center 
U, S, Federal Trade Commission 
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Mr- Walter Haasc 
Deputy Associate Doctor 
fcr Informatics Sy^eTO 
U t S, Office of Management and Budget 

Mr* Jerry Hammett 
Deputy Diiectcr 
Department of Finance 
State of Ohio 

Mr, Peter Herman 
Principal Analyst 

Department of Budget and Management 
Stat€ of Vermont 

Mr, Paul ^Yormali 
%om President 
Public Systems, Icq, 
Sunnyvale, California 

STAFF 

BoffSfstic Council C&mmlfem on (be Right of 

Eileen M, Bartscter 
Besearch Assistant 

Keot S- Lawn 

Director of Public Inlormiticn 

Douglas Laa 
Consultant 

PferniaoA, MacNeil( 
Legal Assistant 

Legal Assistant 



.Alice fi MCarty 
BireetQi of R«siaich 

Noting Executive Director 

David J* Wilnno^iW 
Bescafeh AssWtaat 

3mm ft MUler 
Bescardi Assistant 

Carole W, ParBow 
^Associate Exaeuti^ve Director 

Ceaige B, Trubw 
Oeacral Counsel 

CoiweJI of State Cov€tii«ieiits 

Bravard Crihfidd 
Executive Elracter 

J, Keith Dysart 
Central Counsel 

Kathleen B* Johnson 
Ofitee Wanagtr 

Staff Assistant 

Flattens! Cfintereiici of State L^gblateM 
Paul E# Street 

Special Assistant fcr Floral/ 
State Relations 

National! Governors' Ccnf irtiiee 

Lanay proffer 
plmctor 

Criminal JuatM Project 
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SUGGESTED READING LIST 

PREPARED FOR SEMINAR PARTICIPANTS 



SEMINAR ON PRIVACY 

Washington, D, C. December 1€47 P 1974 



BIBLIOGRAPHIES 

The following bifcsliograpWes- represent compre- 
hensive listings at reference materials dealing with 
personal privacy, record keeping) and data security, 
They hav^ b^cn used extensively in the preparation 
of this reading list, 

Bibliography from: U. Congress. Senate, Com- 
mittta oa th^ Judiciary* SabcMnrnittee on Consti- 
tutional Righls, Federal Bait &mto and Constifu* 
tiaml Rights* A Stu^y o/ Pata Systems on IndM- 
duals Maintained by Agtnc*® of the United States 
Gaverimgnt. Volume 6, W^shirsgtpfl, V, S, Govern- 
mant Jriating Qfiic^ 1974, 3513*3527 p. 
Hunt, M, KPthlaen and fern Turn, Privacy and 
Security in Drntabank System* An Annotated Bib* 
tiogrQphy f I970-19T3* Safiia ZMpflica* the Rand 
Corporation, 1974, i 66 p ! 

Bibliography frofH; Meeker Js, Computers, cmd the 
Rights of Cithern; /fcpcw of £he Secretary^ Ad- 
visory C&Mtrzlttez &ji Mtit&ftaitd Personal Data 
Systems, I! S, Department of Health* Education, 
and Velfaie. IVashinjton^ tX S, Government Print- 
ing Office* 1973- p. 298-3JG 

GENERAL REFEfeE^CES 

Aroncrff, Stanley, ll Years Away." 

State Government, v. 46^ Spring 19?3* 66-75, 

Asserts that expanding private ^nd public record keeping, 
assistid by cofriputerUaji&n, constitutes a threat to the 
right of privacy. Because revere sharing may ma kg state 
and loeal g ever fimenis the j^ati^n s "primary information 
bounds**, t fr€ afijthcrr ra^onr\mendi tht the states "take 
affirmative action to corns to ^rips ^ith the problems of 
records and hm baJiks^ 

Association tor Computing Waahlnfiry* Committee 
on Computers and Public policy. U A Pmblani-List 
of Issues Concerning Computers and Public Policy: 
Report of Ihe Committee^" Communications cf the 
Association jm 'C#mputln$ MQcfiingry, v. 17 s Sept, 
1974; 495-503, 

Discusses some of (he pre^anC and potential problems 
which aiise ^t if%t \f%\et$mci\oji eo^Put^r utilisation and 
various aspects *)f public policy^ Th* issues reviewed in* 



elude Computer! and Privacy, Computers and Nfoney, 
Information Services for Home Use, and Computers afid 
Elections, 

Association for Computing Machinery, Los Anjeles 
Chapter, Ombudsmari Committee, Privacy in infer- 
motion Systems" Phase I Report, Los Angeles ? As- 
sociation for Computing Machinery, 1974- 23 p. 
Report of the initial period of the committee's operation in 
which the connmittee sought to familipriEe itself with 
published recommendations and pending legislation related 
to privacy. The committee's objectives are to study and 
make recommendations concerning the problems of con- 
formance to proposed legislation and other recommenda- 
tions for safeguarding privacy; to inform the public of its 
right to Privacy; and to study the responsibility of data 
processing personnel in business to protect individuals* 
privacy in their job assignments, The committee is limit- 
ing its activities to areas of interest affecting the State of 
California. 

Canada. Department of Communications and De- 
partment of Justice, Privacy and Computers, Ot- 
tawa, Information Canada, 1972, 236 p. 
Report of a Task Force an Privacy and Computers 
established by the Departments of Communication and 
Justice in l?7h Includes a study of the value of prrv^' ? 
a summary of empirical studies of the present state of 
information processing in Canada in both the public and 
private sectors, and an analysis of the legal system and 
the protection of privacy 

Columbia Human Rights Law Review, Winter 
1972: entire vo\Mm$, 

Devoted to the debate on privacy. Articles include- Arthur 
R. Miller, "Computers, Data Banks and Individual 
Privacy: An Overview*** Sam J* Ervin, Jr.* "The First 
Amendment: A Living Thought in the Computer Age," 
Nicholas deft, Katzenbach and Richard "W, Tome, "Crime 
Data Centers : The Use ct Computers In Crime Detection 
and Prevention**- Frank Askin, "Surveillance: The Social 
Science Perspective," Michael A, Baker* ''Record Privacy 
as a Marginal Problems The limits of Consciousness and 
Concern," and John P. Ftannery, "Commercial Informa- 
tion Brokers*" 

Computer Security Handbook, Riverside* N. J.; Mc- 
Millan Publishing Co., Inc., 1973, 
** , , a Covers such risks as abuse of data, loss of data* 
physicaj hazards, equipnnent malfunction, software mal- 
function* and hiiman error. Each of these areas is fully 
expo red and detailed recommendations for implementa- 
tion of protective measures are included,'* 

"The Constitutional Right of Privacy: An Exami- 
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nation.'* Northwestern University Law Review, 
69, May-Juan 1972: 263-3QL 

Reviews State and Federal court decisions dealing with 
constitutional protection of personal privacy 

Fried, Charles. l *Privaey,' f Yale Law Journal, v. 
77, Jan, 1968: 457-93, 

Examines the foundations to the right of privacy. Dis- 
cusses legal rules in the social context of privacy and the 
role of sanctions. 

Goldstein, Robert C. The Cost of Privacy: Opera* 
linnal and Financial Implications of Databank - 
Privacy Regulation* Boston Honeywell Infomnatlon 
Systems, 1975, 150 p* 

Discusses a medal for examining resource requirements 
md the cost impact of applying privacy regulations to 
personal data systems. The study also reports on a test of 
the model on six large data banks In both public and 
private organ izaCloni, including two systems operated by 
state law enforcetn^fit agencies. 

IBM Corporation, Data Security and Data Proc- 
essing: Study of Specific Aspects of Data Security, 
White Plains, N. IBM Corporation, 1974, 1253 
P* 

A siX'Volume report of a study of specific aspects of data 
security funded l:y IBM and carried out at four study sites: 
the Massachusetts Institute of Technology, the State of 
Illinois. TRW Systems, Inc., and the IBM Federal Systems 
Canter, 

Illinois, State of, and IBM Corporation* Secure 
Automated Facility Environment Project. The £te» 
merits and Economics of Information Privacy and 
Security, Springfield, Illinois, Project SAFE, State 
of Illinois, 1974, 123 p, end appendices. 

Publication resulting from the activities of Project SAFE 
established by the State of Illinois with the) assistance of 
IBM Corporation* to develop safeguards for information 
systems, Contains a checklist of cost considerations, This 
overview from Project SAPE offers perspectives on tech* 
nology* on costs and benefits, and on the social demands 
which government and industry must expect, 

Levin, Eugene* "The Future Shack of Infonmtion 
Networks^ Astronautics and Aeronautics 9 v* 11, 
Nov. 1973: 52-5% 

States that '\ . , we are at the threshold of a commitment 
to networks of computers, 

"By 1976 it will he extremely dMScjult to incorporate the 



necessary controls in financial and government compuier 
networks, and by 1980 it will prohahly no longer be 
possible to change events* only to preside over ehaoi," 

Martin, James, Security, Accuracy, and Privacy in 
Computer Systems, Bngleyvrod Clifs, N. L, Pren- 
tice HaU, Inc., 1973, 626 p. 

A definitive text ( including 90 pages of checklists md 
summsiries) for security manageineflt. 

"Measures to Protect Personal Privacy Increases at 
State LevcL 1 * Communications of the Assaciaiion 
for Computing Machinery, % 16, Jan, 1973: 65-66* 

Discusses two state actions favoring privacy as a funda- 
mental right of citizens i oae, the California voters' ap- 
proval of the addition of privacy to the state constitution 
as ait inalienable right; two p the Colorado Supreme Co^ift 
decision that records of arreses without convictions could 
not be maintaifjed. 

Miller, Arthur R, The Assault an Privacy" Corn*- 
p&ters. Data Banks, and Dossiers* Ann Arbors The 
University of Michigan Press, 1971, 334 p* 

Discusses *\ , , certain aspects of cur increasingly electronic 
way of life . . . > Its aim is to esgJlore some of the ways In 
which information technology Is altering basic patterns in 
pur daily life and to evaluate the responses being made 
by the law, government, Industry, and other institutions to 
the new forms of data handling . * , 

Parker, Bonn B., Susan Nyeiiai and S, Stephen 
Oum* Computer Abuse, Menlo Parks Calif-, Stan- 
ford Research Institute, 1973, 131 p. 
Considers computer abuse from the technical, legal, mnd 
sociological perspectives* It is the "first attempt to docu- 
ment and define the problem based on a typology of ire- 
ported cases and investigation in detail of severe! of 
them," An appendix contains summaries of the eases ( 143) 
collected as a data base for continuing studies of com- 
puter abuse. 

Parker, Richard Befimtion of FrlvaeyJ 5 

Rutgers Law Review, v, 27, 1974: 279-296. 

Attempts •*(!) to present and defend a definition of 
privacy which explains the close oonnecUon privacy has 
with the fourth amendment, arid with some of the ether 
amendments In the Bill of Rights; (2) to use the definition 
to clarify what privacy means in other legal and non-legal 
contexts; and, (3) to apply the definition to United States 
v. White to illustrate how and abstract definition of 
privacy can affect the analysis of a ease " 

Pennoek, J, Roland and John W. Chapman, ed. 
Privacy, Nomas XIII: Yearbook of the American 
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Society for Political and Legal Philosophy* New 
York, Atherton Press, 197L 255 p, 

A collection of papers which consider privacy from the 
perspectives of philosophy, political science, law, anthro- 
pology, politics, and sociology, 

Ralston, Anthony Ch "Computers and Democracy," 
Computers and Automation, v, 22, April 1973: 
19-22, 40. 

Discusses various aspects of the problem of balancing the 
use of Computers for the good of society with the ac- 
companying restrictions on personal freedom. The author 
concludes that H we must retain the jope that computers 
offer us while at the same time minimizing a threat we 
cannot eliminate.*' 

Records, Computers, and the Mights of Citizens: 
Report of the Secretary's Advisory Committee on 
Automated Personal Data Systems^ U.S. Govern- 
ment Printing Office, 1973, 346 p. Also: Cam* 
bridge^ Mass., Massachusetts Institute of Tech= 
nology Press, 1973, 

Report of an HEW-sponsored committee which was asked 
to "analyse and make recommendations about: harmful 
consequences that may result from using automated per* 
sonal data systems; safeguards that might protect against 
potentially harmful consequences; policy and practice re- 
lating to the issuance and use of Social Security numbers." 
This report discusses in depth the key issues identified, the 
findings of the Committee* and their specific recommen- 
dations and suggested action program, 

Renninger, Clark R, and Dennis K, Branstad, ed, 
Government Looks ai Privacy and Security in Cotru 
puier Systems, VVashingtori, National Bureau of 
Standards* U, S. Department of Commerce, 1974, 
37p. 

**. , . Summarizes the proceedings of a conference held for 
the purpose of highlighting the needs and problems of 
Federal, State, and local governments In safeguarding in- 
dividual privacy and protecting confidential data contained 
in computer systems from loss or misuse, The Conference 
was held at the National Bureau of Standards on Ncvenv 
ber 19^20, 1973'* 

Renningerj Clark ed. Approaches to Privacy 
and Security in Computer Systems, Washington* 
National Bureau of Standards, U. S. Department 
of Commerce, 1974, 72 p. 

**. . . Summarizes and contains the proceedings of a con- 
ference held at the National Bureau of Standards on 
March 4^5, 1974, to continue the dialog in search of ways 



to protect confidential information in computer systems. 
Proposals are presented for meeting governmental needs 
in safegarding individual privacy and data confidentiality 
that were identified at a conference held In November 
1973, Among the proposals are the enactjoiest of privacy 
legislation, improved computer system architecture and' 
access controls, information and security management 
guidelines and the development of a systematic, balanced 
approach to system security," 

"Sweden's Data Act" Computer Decisions, Nov. 
1973, p, 50-52, 

Pertains to the act designed to protect personal informa* 
lion which became effective in Sweden on My 1, 1973, 
The Azt is reproduced here, 

Turn, Rein, Privacy and Security in Personal in- 
formation Databank Systems. Santa Moniea, the 
Rand Corporation, 1974, 104 p. 

Classifies databank systems wn the basis of a number of 
data security related criteria, Such aspects of personal 
information as sensitivity and value are examined. A 
sensitivity scale and a personal information classification 
system are proposed. Using a game -theoretic mode] as Uie 
vehicle, costs and effectiveness of data protection, as well 
as costs of intrusion, are discussed. The report concludes 
with an analysis of implications of implemeiitiing the major 
components of total protective systems. 

Ware, Willis H. Data Banks, Privacy, and Society, 
Report No, 5131, Santa Moniea, the Rand Cor- 
poration, 1973, 11 p. 

Discusses new dimensions to the problem of personal 
privacy added by the advent and use of computer tech- 
nology with reference to information needs of society* the 
accessibility of personal information, and the potential for 
data linkages; contains suggestions for controlling the 
collection^ dissemination, and use of personal data, The 
auttior concludes with a call to action in several areas: 
public education on the need for personal privacy, solicit* 
tng the support of consumer-oriented organizations for 
legislation, public participation in a debate on the implica- 
tions of a fully-numbered society, and research on various 
aspects of personal privacy, 

Warner, Malcolm and Michael Stone, The Data 
Bank Society,' Organizations, Computers, and Social 
Freedoms, London Unwin Brothers, Ltd,, 1970, 
244 p, 

Survey of governmental and private information systems in 
Great Britain, Europe, and the United States and their 
implications for persona] privacy; examines record 
keeping in the fields of medicine, criminal justice* finance, 
banking, credit, and local government. 
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W^stin, Alan F, and Michael A. Baker, Databanks 
in a Free Society; Computers, Record-Keeping and 
Privacy, New York, Quadrangle Books, 1972,552 

Report of the Project on Computer Databanks of the 
Computer Science and Engineering Board, National 
Academy of Sciences. Tf;e Pro wet investigated "what the 
use of compute rs h r.ctimlly doing to record-keeping 
processes- in the United itote&. nnd wMt the growth of 
large-scale databanks, ftath manual and computerized, 
iniplies for the citizen V, constitutional rights to privacy 
and due process/' 

Westin, Alan F., ed. Information Technology in a 
Democracy, CarnbriUgej Mass., Harvard University 
Press, 1971. 499 p, 

A collection of approximately 50 papers relating to the 
use of information technology in the political decision- 
making process. Includes: Harold Black and Edward 
Shaw, "Detroit's Social Data Bank;" Santa Clara County, 
Calif., "The? LOCJIC Information System;" Robert R. J, 
Gallati, *Tbc New Yorh State Identification and Intelli- 
gence System^" Edward M, Brooks* "The United Planning 
Organization's Social Databank;" Anthony Downs, "The 
Political Payoffs In Urban Information Systems;-* and 
Edgar S. Dunn, Jr, "Distinguishing Statistical and In- 
telligence Systems." 

Westin, Alan F, Privacy and Freedom, New York, 
Atheneum Press, 1967= 487 p. 

A seminal work on the implications of surveillance tech- 
nologies for personal privacy. 

Wheeler^ Stanton, ed, On Record: Files and Dossiers 
in American Life, New York, Russell Sage Founda- 
tion, 1969. 499 p. 

Describes record-keeping practices in American schools, 
credit agencies, business organizations, insurance com- 
panies, military and security agencies, public welfare sys- 
tems, juvenile courts, and mental hospitils. Also includes 
an examination of record keeping activities of the 
Census Bureau and the Social Security Administration. 

Younger, K, ? Chairman, Reports of the Committee 
on Privacy* London, Her Majesty*s Stationery Of- 
fice, 1972, 350 pages. 

Final report of a committee established in 1970 to review 
the need for legislation to protect 'individuals and com- 
mercial and industrial interests" from invasion of privacy. 
The report examines the nature of privacy, complaints of 
invasion of privacy, the adequacy of present law in pro- 
tecting against invasion of privacy, the disclosure of 
confidential information* and the creation of a general 
right of privacy. 
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STATE AND LOCAL GOVERNMENT 
RECORDS ON INDIVIDUALS 

California, State of. Intergovernmental Board on 
Electronic Data Processing. Guidelines Establish- 
ing Requirements for Security and Confidentiality 
of Information Systems, Sacramento, Calif,, Docu- 
ments Section, 1974 74 p, 

These guidelines alert management to the dangers posed 
by threats to security, confidentiality* and privacy and 
suggest preventive measures to minimize possibilities of 
loss, Each section, presented in checklist format* includes 
a bibliography, 

Curran, William J, s Eugene M. Laska, Honofa 
Kaplan, and Rheta Bank. "Protection of Privacy 
and Confidentiality: Unique Law Protects Patient 
Records in a Multistate Psychiatric Information 
Systems,'* Science* v. 182, 1973: 797-802, 

Describes the origins, purpose, and operations of the 
multistate information system, and existing procedures for 
maintaining confidentiality, including the special New 
York State protective statute, 

"Integrated Municipal Information Systems: The 
US AC Approach — City Hall's Approachiiig Re- 
volution in Service Delivery," Nation*? Cities, Jan, 
1972: 10-40, 

Summary of a report prepared by the Federal Urban 
Information Systems Inter-Agency Committee, Describes 
the basic components of an IMIS and the steps required for 
their implementation, 

Kauffman, Miles P, "Welfare and the Right to 
Privacy; Applicants Rights," Res Ipsa Loquitur, 
V, 25, Fail 1972; 107-113, 

Contends that too often a citizen's right of privacy ceases 
to exist when he becomes a welfare recipient, 

McNamara, Robert M. f Jr, and Joyce R, Starr, 
"Confidentiality of Narcotic Addict Treatment Re- 
cords: A Legal and Statistical Analysis," Columbia 
Law Review, v. 73, Dec, 1973: 1579 - 1612, 
Examines the policies in handling treatment records of 
nearly two hundred narcotics treatment centers in the 
United States Threats to records include overzealous law 
enforcement personnel and investigators for credit report- 
ing bureaus. Legal mechanisms for improved protection 
of treatment records are analyzed. 

National Assembly for Social Policy and Develop- 
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merit, Inc. A New Look at Confidentiality in Social 
Welfare Services, New York, 1973, 14 p. 

Presents guidelines and specific instructions to assist social 
welfare agencies in formulating appropriate policy for the 
protection of their clients* privacy, Agencies are urged to 
apply the recommendations of the HEW Secretary's Ad* 
visory Committee Report, as outlined here* to both com- 
puterized and manual files. 

National Association for State Information Systems. 
Information Systems Technology in State Govern- 
ments 1973 NASIS Report. (1974, Available from 
the Council of State Governments, Iron Works 
Pike, Lexington, Ky^ 40505) 60, p, and ap- 
pendices, 

"Information was sought for the first time on some of the 
basic problems relating to security and privacy, The se- 
curity questions had to do with physical and data security 
procedures. Privacy questions were aimed at obtaining an 
overview of the status of legislation and estimates of 
public concern. 1 * 

Noble, John H,, Jr, "Protecting the Public's Privacy 
in Computerized Health and Welfare Information 
Systems." Social Work, v, 16, Jan. 1971: 35-41. 

Discusses the impact of automated record keeping on the 
traditional practices of social work and health profes* 
sionals. Suggests guidelines by which to judge proposals 
to automate existing information systems and urges support 
of legislation to regulate all computerized databanks, 

"Public Access to Government-held Computerized 
Information,** Northwestern University Law Re- 
view, v, 68, May June 1973: 433-462, 
Comment reviews existing literature on computers and 
privacy, documents ways in which government computer 
facilities can safeguard privacy, and evaluates chances of 
success for such safeguards. 

Rioux, J. William and Stuart A, Sandow, Children, 
Parents, and School Records, Columbia, Md,, Na= 
tional Committee for Citizens in Education, 1974. 
313 p. 

Advocates reform of school record-keeping practices to 
assure the privacy and due process rights of students. 
Contains general information, readings, relevant data about 
each state, examples to substantiate the authors 1 position, 
and suggestions for action. 

StaUings* C. Wayne. M Local Information Policy: 
Confidentiality and Public Access." Public Ad- 



ministration Review, v, 34, May-June 1974: 197- 
204, 

Outlines a model policy for local governments that protects 
privacy while assuring legitimate public access to govern- 
ment records. Presents a scheme for classifyini various 
types of information and specifying appropriate degrees of 
access to each type, and discusses an organizational struc- 
ture to regulate such access, (Summary of a larger report 
prepared for the Charlotte Integrated Municipal Informa- 
lion Project), 

Steinberg, Joseph. "Some Aspects of Statistical Data 
Linkage for Individuals," In Data Bases, Com- 
puters, and the Social Sciences, New York, John 
Wiley and Sons, Intersciences Division, 1970* p, 

Z38 - 251. 

Examines evidence of concern by the Social Security 
Administration regarding the possible role of the Social 
Security Number in facilitating invasions of privacy. Dis- 
cusses the release of Social Security data for research 
purposes* violations of statistical confidentiality, and re- 
fusal of the Social Security Administration to cooperate 
with proposed use of the SSN by other agencies. 

U. S. Congress, House, Committee on Government 
Operatioss, Foreign Operations and Government 
Information Subcommittee, Access to Records. 
Hearings, 93d Congress, 2d session, on H. R. 12206 
and Related Bills. Washington, U, 5* Government 
Printing Office, 1974. 338 p, 

' H. R, 12206 and related bills, to amend Title 5, United 
States Code, to provide that persons be apprised of 
records concerning them which are maintained by govern- 
ment agencies."' Hearings held Feb. 19, 26, April 30* and 
May 16, 1974, 

U, S, Congress. Senate, Committee on Government 
Operations, Ad Hoc Subcommittee on Privacy and 
Information Systems, Committee on the Judiciary, 
Subcommittee on Constitutional Rights, Privacy: 
The Collection, Use, and Compteriiation of Per* 
sonal Data, Joint Hearings, 93d Congress, 2d ses- 
sion, on S. 3418, 8, 3633, S, 3116, S, 2810, S, 
2542, June 18-20, 1974, Parts I and II, Washing- 
ton, U. S, Government Printing Office, 1974, 2335 
P- 

Hearings on a series of bills proposing controls over 
government and commercial databanks in order to safe- 
guard the privacy rights of individuals who are the subjects 
of these information systems, 
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Zastrow, Charles. 'The Status of Commiinitywide 
Social Data Banks," Welfare in Review, v, 10, 
Mar. - Apr. 1972: 32*3 & 

Findings from a study of the feasibility of a community- 
wide automated social information center in Dane County 
(Madison), Wisconsin conducted by its Social Planning 
Agency, See discussions of confidentiality and access to 
data, 

PUBLIC EMPLOYEES' RECORDS 
"Application of the Constitutional Privacy Right to 
Exclusions and Dismissals from Public Employ- 
merit" Duke Law Jour^ml, Dec, 1973: ID37-I062. 

Gaillard, Frye. "Polygraphs and Privacy," The Pro- 
gressive, Sept, 1974: 43-46. 

Discusses the increasing use of the polygraph by business - 
establishments to test applicants'/employees* honesty, 
usually for one of three purposes* (1) pre-employment 
screening, (2) a periodic sampling of workers to *est basic 
honesty, loyalty, and adherence to company policy, and 
(3) specific tests directed to solving particular thefts or 
irregularities, 

Miller, Herbert S. The Clmed Door' The Effect of 
a Criminal Record on Employment with State and 
Local Public Agencies, WasMngtea, Institute of 
Criminal Law and Procedure Georgetown Univer- 
sity Law Center, 1972, 252 p. 

Indicates that an arrest record even without conviction is 
a substantial handicap. Despite protective laws, juvenile 
records are not confidentiality maintained; arrest records 
are often incomplete; and arrest records are widely circu- 
lated via the FBI. The recommended solutions are an 
Equal Employment Opportunity Commission order pend- 
ing the enactment of federal legislation. 

U. S, Congress, House, Committee on Post Office 
and Civil Service* Suboommittee on Retirement 
and Employee Benefits Right to Privacy of Federal 
Employees, Hearings, 93 d Conpess, 1st and 2d 
sessions, on H. R, 1281 and related bills, Washing- 
ton, U, S, Government Printing Met, 1974, 378 p, 

"H. R, 1281 and related bills, to protect the civilian em- 
ployees of the Executive Branch of the United States 
Government in the enjoyment of their constitutional rights 
and to prevent unwarranted governmental invasions of 
their privacy," Hearings held May 14 and 15* June 4, 
1973 and April 24, August 8, 1974. Many of the concepts 
discussed in these hearings are equally applicable to the 
privacy rights otf employees of state and local governments, 
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Walsh, Timothy J. -'Background Information Use 
Limited by New Law," Industrial Security, April 
1971 ; 4-12. 

Summarizes restrictions on the use of background in- 
vestigations for screening prospective employees con- 
tained in the Fair Credit Reporting Act and the Gregory 
vs. Litton decision. 

CRIMINAL JUSTICE INFOEMATION 
Gallati, Robert R. J, "State Criminal Justice In- 
formation Systems." AFIPS Conference Proceed- 
ings, v. 39, 1971; 303^308. 

Traces the development ot the New York State Identifica- 
tion and Intelligence System as a case study of a model 
criminal identification bureau. Outlines several major 
problems encountered, e.g., need for autonomy, difficulties 
In data conversion, and state-of-the-art technology in 
automated identification. 

Gates, Andrew L* "Arrest Records— Protecting the 
Innocent" Tulane Law Review, v, 48, April 1974: 
629^648. 

Longton, Paul A. "Constitutional Law— Mainte- 
nance and Dissemination of Records of Arrest 
Versus the Right to Privacy." Wayne Law Review, 
v, 17, July- Aug. 1971, 

MacDonaldi Malcolm E* "Computer Support for 
the Courts— A Case for Cautious Optimism." 
Judicature, v, 57, Aug.-Sept. 1973: 52-55. 

Reviews some successful applications of computer tech- 
nology to court administration, such as jury selection, 
criminal case docketing, scheduling, etc, Stresses the need 
to proceed carefully with innovative applications, which 
should reflect appropriate law and procedure, court re- 
quirements, and security standards, 

National Advisory Commission on Criminal Justice 
Standards and Goals, Criminal Justice Systems, 
Washington, U, S, Government Printing Office, 
1973. 

Presents extensive and detailed criteria for criminal justice 
systems, with explanatory comments. These sixty-eight 
standards fall into four categories— planning, information 
systems, education, and legislation— and apply variously to 
the local, state and federal levels. 

National Council of Juvenile Court Judges, Com- 
puter Applications in the Juvenile Justice System: 
Proceedings of the National Symposium on Com- 
puter Applications in the Juvenile Justice System, 
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Atlanta, Georgia, Dec, 6-8, 1973, (Reno, Nevada, 
University of Nevada) 1974, 248 p, 
Describes the impact of computers on different aspects of 
juvenile justice administration. Includes papers by Mclvin 
T, Bockelman and Malcolm E. MaeDonald on privacy 
and security considerations. 

New York, State of. Supreme Court. First and 
Second Judicial Departments, Appellate Divisions, 
The Departmental Committees for Court Adminis- 
tration. Automation in the Courts: Its Impact on 
Record-Making and Record-Keeping; Implications 
Jot the Private Citizen and the Public, Symposium, 
New York, November 1971, 

Project SEARCH, i.e,. System for Electronic: Analysis and 
Retrieval of Criminal Histories, (A combined effort, 
initialed in 1969 by the Law Enforcement Assistance Ad- 
ministration and several states, to develop a prototype 
computerized criminal information system* Specialized 
committees, merging expertise from all parts of the 
country, wrote the following reports. They were published 
by Project SEARCH* which recently shed its government 
sponsorship. Its work continues under tha auspices of 
SEARCH Group, Inc„ a non-profit research organization 
headquartered in Sacramento, California.) 
Computer Hardware and Software Considerations, 
(Technical Memorandum No. 6) Jan. 1974. 40 p. 
Design of a Model State Identification Bureau. (Techni- 
cal Report No. 8) Nov, 1973. 143 p, and appendix. 

Design of a Standardized Crime Reporting System, 
(Technical Report No. 9) Dec. 1973. 1 40 p. 
Designing Statewide Criminal Justice Statistics Systems^ 
An Examination of the Five*State Implementation, 
(Technical Report No. 5) Dec, 1972, 137 
Designing Statewide Criminal Justice 'Statistics Systems^ 
The Demonstration Prototype, (Technical Report No, 3) 
Nov. 1970, 60 p, and appendix. 

Model Administrative Regulations For Criminal Offender 
Record Information, (Technical Memorandum No. 4) 
March 1973. 67 p. 

A Model State Act For Criminal Offender Record In* 
formation. (Technical Memorandum No, 3) May 197 L 
46 p. 

Preliminary Requirements Analysis For Criminal Justice 
—Law Enforcement Telecommunications, (Technical 
Memorandum No* 7) Jan. 1974, 170 f. 

Project SEARCH Security and Privacy Publications, 
(Technical Report No. 2, Technical Memorandum No. 
3, and Technical Memorandum No, 4) May 1973, 
(various pagings.) 



Security and Privacy Considerations in Criminal History 
Information Systems, (Technical Report No, 2) July 
1970. 57 p, 

Terminal Users Agreement for CCH and Oilier Criminal 
Justice Information. (Technical Memorandum No, 5) 
Nov. 1973, 13 p. 

Shappley, William L, "Branded: Arrest Records of 
the Unconvicted," Mississippi Law Journal, v, 44, 
1973: 928^946, 

Discusses "individual rights of privacy as constitutionally 
guaranteed and as balanced against the public necessity for 
retention of arrest-record data, M Reviews the statutory ap- 
proach of California, Connecticut, Illinois, and New York, 
Pertinent judicial decisions, and the current Mississippi 
position. 

U, §, Congress, House* Committer on the Judiciary, 
Subcommittee No. 4, Security and Privacy of 
Criminal Arrest Records, Hearings, 92d Congress, 
2d session, on H, R, 13315, Washington, U. S, 
Government Printing Office, 1972, 520 p. 
Hearings held March 16, 22, 23* April 13, 26, 1972, 
Explores methods of safeguarding* simultaneously* in- 
dividual privacy and the needs of law enforcement officials, 

U, S, Congress, House, Committee on the Judiciary 
Subcommittee on Civil Rights and Constitutional 
Rights, Dissemination of Criminal Justice Informa^ 
Hon, Hearings, 93d Congress, on H, R, 188, H, R* 
9783, H, R, 12574, H, R. 12575, Washington: 
U, S, Government Printing Office, 1974, 586 p, 

Hearings held July 26, September 26, and October 11, 
1973; February 26, 28, March 5, 28, and April 3, 1974, 

U, S. Congress, Senate, Committee on die Judiciary, 
Subcommittee on Constitutional Rights, Criminal 
Justice Data Banks, Hearings, 93d Congress, 2d 
session on S, 2542, S, 2810, S. 2963, and S, 2964, 
March 5-7; 12-14, 1974, 2 Vols, Washington, 
U, S, Government Printing Office, 1974, 1149 p. 

Examines the need for legislation **to protect the privacy 
and reputations of persons whose names appear in criminal 
justice data banks" in light of law enforcement practices 
and requirements. 

U, S, General Accounting Office, Comptroller 
General of the United States, How Criminal Justice 
Agencies Subcommittee on Constitutional Rights* 
Committee on the Judiciary, United States Senate* 
Washington, General Accounting Office, 1974. 70 p, 
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Summarizes findings based on an analysis of a random 
sample of requests made by agencies in California, 
Florida, Massachusetts, and by Federal agencies, to the 
Federal Bureau of Investigation (FBI) and appropriate 
state agencies. 

YVorrneli, Park K, "The SEARCH For Automated 
Justice.' 4 Datamation; v, 17, June 15, 1971: 32-35 

Discusses the multi-state Project SEARCH (System for 
Electronic Analysis and Retrieval of Criminal Histories), 
This article, by the Project coordinator, details the objec- 
tives, system concept* procedures* progress, and status of 
the program, 

RECORDS ON CONSUMERS 

American Bankers Association, Report of the Auto- 
mated Clearing House Task Force * Washington, 
American Bankers Association, 1974, 94 p. 

An effort to establish industrywide standards for the elec- 
tronic transfer of funds nation-wide. The American 
Banking Association report recommends that a national 
automated clearinghouse association be established for 
continued analysis of problems and opportunities; that* 
automated clearinghouses be established in each region of 
the U. that action be taken to increase general under- 
standing of the concept to insure full development; end 
that all parties concerned step up education and marketing 
research efforts. 

Foer, Albert A, "The Persona! Information Market: 
An Examination of the Scope and Impact of the 
Fair Credit Reporting Act." Loyola Law Students 
Consumer Journal, v, II, 1974: 37-138. 

Discusses a study of the personal information market in 
the Chicago area to assess the impact of the Fair Credit 
Reporting Act. The new law is evaluated in terms of its 
"ability to cope with seven particular abuses'' present prior 
to passage of the PGR A, A final section sets out and 
weighs various suggested strategies for reform. 

''Government Access to Bank Records," Note. Yale 
Law Journal v, 83, 1974; 1439-1474. 

"i . Isolates the problem of government access to one 
type of third party data! checking account records main- 
tained by commercial banks. It is argued that, given the 
purposes of the Fourth Amendment and the changes which 
have taken place in the nature of property and privacy, 
individuals should be able to contest an unreasonable 
search and seizure of their bank records . . . Maintains 
that banks ordinarily lack authority to consent to a 
government search of depositors' records. 



Hendrickson, Robert, The Cashless Society, New 
York, Dodd, Mead & Co,, 1972, 

A discussion of the increasing reliance on credit systems 
and the implications for individual freedom, 

Olafson, Freya, Allen Ferguson, Jr M and Alberta 
W. Parker. Confidentiality: A Guide for Neighbor* 
hood Health Centers, Neighborhood Health Center 
Seminar Program Monograph Series No. I. San 
Francisco, Pisani Printing Co, f 1971, 

A study of legal and ethical aspects of confidentiality of 
patient information and records maintained by neighbor* 
hood health centers. Applicable state laws in California, 
Alabama, New York, and Ohio are included, 

Parker, Suzanne, The Electronic Funds Transfer 
System, Washington, Library of Congress, Con- 
gressional Research Service, 1974, 18 p, 

. , Discusses the development of the system to date as 
well as those changes which are visualized, Jn addition, 
the possible impact of the system on various segments of 
the economy will be covered. Finally, discussion of the 
proposals relating to how the system should be imple- 
mented and controlled will be included," 

Prism: The Socioeconomic Magazine of the Amen* 
can Medical Association, v. 2, June 1974: entire 

issue, 

Devoted to a comprehensive report on privacy and con- 
fidentiality, The editors have attempted to set the subject 
of privacy in its social context, focusing on special medical 
implications of privacy. The issue includes articles by such 
legal scholars as Senator Sam J, Ervin, Jr., Arthur R. 
Miller, and Alan F, Westin, as well as such physician een= 
tributors as Alfred M- Friedman, Carman It S. Jackson, 
ond Ralph Crawshaw, 

"Protecting the Subjects of Credit Reports," Note, 
Yale Law Journal v. 80 ? April 1971: 1035-1069, 

. , Identifies the injuries and costs of credit reporting and 
suggests that enterprise liability and further legislation are 
required for the protection of the consumer.* 4 This article 
appeared shortly after the enactment of the Fair Credit 
Reporting Act, 

Rule, James B. Private Lives and Public Surveil- 
lance: Social Control in the Computer Age, New 
York, Schoeken Books, Inc., 1974. 382 p. 

Discusses the use of personal information as a means of 
social control, The record-keeping activities involved in 
police record systems, vehicle and driver licensing, Na« 
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tional Insurance in England, and consumer credit and the 
Bankamericard systems in the United States are analyzed 

Sackman, Harold and Norman Nie, ed, The In- 
formation Utility and Social Choice, Montvale 5 
N. J. s AFIPS Press, 1970, 299 p, 

A group of papers prepared for a conference sponsored by 
the University of Chicago, the Encyclopedia Britannica, 
and the American Federation of Information Processing 
Societies, The papers address the desirable uses of mass 
information utilities and the effects of direct citizen par- 
ticipation upon political processes. 

Stanley, David T. and Marjorie Girth, ed, Bank- 
ruptcy: Problem, Process, Reform, Washington, The 
Brookings Institution, 1971. 270 p. 
Reviews current procedures in bankruptcy in the United 
States (which relate to issues of consumer record-keeping ), 
. . . "deals with the economic, legal, and personal aspects 
of the subject, but its main emphasis is on bankruptcy as 
a governmentak process — on its institutions, personnel, pro- 
cedures, and financing. 

Stern, Laurence C. "Medical Information Bureau: 
The Life Insurer's Databank," Rutgers Journal of 
Computers and the Law, v. 4, No. 1, 1974: 1-41. 
Reviews the background and operation of the Medical 
Information Bureau, an association of life insurance com- 
panies, which enables member companies to exchange 
underwriting and claims information about life insurance 
applicants and claimants. The author discusses the Bureau's 
relationship to the requirements of the Fair Credit Report- 
ing Act and other consumer privacy protection issues, 
U. S. Congress. House, Committee on Government 
Operations. Foreign Operations and Government 
Information Subcommittee, Sale or Distribution of 
Mailing Lists by Federal Agencies. Hearings, 92d 
Congress, 2d session, on H. R. 8903 and Related 
Bills. June 13 and 15, 1972, Washington; U, S, 
Government Printing Office, 1972. 362 p. 
Hearings on proposals to amend the Freedom of Informa- 
tion Act to eliminate the dissemination of Government* 
prepared lists for commercial or* solicitation use. Raises 
issues which would apply to the use and distribution of 
mailing lists by other public agencies and private organiza- 
tions. 

U, S, Congress. Senate. Committee on Banking, 
Housing and Urban Affairs. Subcommittee on Con- 
sumer Credit. Fair Credit Reporting Act— 1973; 
Hearings, 93d Congress, 1st session, on S, 2360, 
October 1-5, 1973, Washington, U, S. Government 
Printing Office, 1973. 993 p. 



Hearings on proposed amendment of the Fair Credit Re- 
porting Act, Review of the administration of the Act to 
determine if additional consumer safeguards are needed. 

U, S. Congress. Senate, Committee on Banking, 
Housing and Urban Affairs, Subcommittee on Con- 
sumer Credit, Credit Reporting Abuses, Hearings, 
93 d Congress, 2d session on amending the Fair 
Credit Reporting Act, February 5, 1 974, Wash- 
ington; U. S. Government Printing Office, 1974. 
54 p- 

Hearings on abuse in the credit reporting industry, 
prompted by the Subcommittee's decision to table S, 2360 
in November 1973. 

Urban Planning Aid, Inc, The Media Project. The 
Cable Book: Community Television for Mas- 
sachusetts? Cambridge, Mass,, Urban Planning Aid, 
Inc., 1974, 106 p. 

A handbook for . . groups who are trying to figure out 
what it's (eable television) all about and what it's going 
to mean to them and their communities." Chapter 5 deals 
with the privacy impact of cable television. 
Westermeier, John T. a Jr. "The Privacy Side of the 
Credit Card." American University Law Review, v, 
23, Fall 1973: 183-207, 

" . . Examines credit card use in light of the developing 
right of privacy. The focus will be on the loss of privacy 
that results from excluding the cardholder from the de- 
cisions concerning the exchange of personal information 
thai is collected and maintained in the operation of the 
credit card system." 

Wetterhus, Alan, <4 The Cashless, Checkless Society: 
On Its Way?" Computers and Automation, v. 21, 
Nov. 1972; 14^15, 17, 

Discusses the utilization of computer systems to transfer 
funds between accounts via electronic impulses, e.g., 
directly from a customer's bank account to a retailer 
from whom he is making a purchase. Some bankers have 
expressed concern about the practicality and profitability 
of these systems and questions exist about customer ac- 
ceptance and invasion of personal privacy. However, pilot 
studies are under way in various locations as part of 
banks* growing recognition of a need to become full 
financial service institutions, 

Willis, Donald S, "Who Knows You; A Look at 
Commercial Data Banks." Computers and Automa- 
tion, v. 22, March 1973; 18-21. 
Discusses some common commercial data banks (credit, 
investigative, sales prospects) with respect to the threat 
they pose to personal privacy, 
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THE DOSSIER SOCIETY t 
Arthur R. Miller • 



In Recent Years there has been a growing public 
awareness of the effects certain data-gathering acti- 
vities and applications of information technology 
may have on individual and commercial privacy. At 
times the debate has been conducted in emotional 
terms, For example* many people, myself included 
I must confess, have voiced the fear that the 
computer, with its insatiable appetite for infor- 
mation, its image of infallibility, and its inability 
to forget anything that has been put into it, may 
become the heart of a surveillance system that 
will turn society into a transparent world in which 
our home, our finances, and our associations are 
bared to the most casual observer, 1 

A brief recital of some of the blessings and blas- 
phemies of the new technology makes the computer- 
privacy dilemma abundantly clear. In various med- 
ical centers, doctors are using computers to monitor 
physiological changes in the bodies of heart patients 
in the hope of isolating those alterations in body 
chemistry that precede a heart attack. The quest* of 
course, is to provide an "early warning system** so 
that treatment is not delayed until the actual heart 
attack has rendered the patient moribund for all 
practical purposes, Other plans include providing 
everyone a number at birth to identify them for 
tax, banking, education, social security, and draft 
purposes, This would be done in conjunction with 
the computerization of a wide range of records. The 
goal Is to eliminate much of the existing multiplicity 
in record-keeping, and at the same time expedite 
the business of society. Long range goals include de- 
veloping a eheckless, cashless economy, improving 
the informational bases available tot rational plan- 
ning, providing better services to people, and pro- 
moting the equitable allocation of society's resources. 

t These remarks were originally delivered as a lecture in the Pfiv- 
aev and the Law series at the University of Illinois College of Law, 
Marsh 15* 197L Reprinted with permission from University of Hlh 
twit Law Forum, Vol. 1971 No, 2, bp, 154-167, 

* Professor of Law, Harvard University Hie author has more fully 
explored the subject matter of his address in A, Milter, The Assault 
on Privaey^ Computers, Data B&nks and Dossiers (1971) ? and Miller 
Personal Privacy in the Computer Axe; The Challenge of m New 
Technology in an Information^Oriented Soelety, €7 Mich* L, Rev, 
1089 (1969), 

* Miller, The National Data Center and Personal Privacy \ The Ah 
lantic, Nov, 1967, at 53-57* 
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We may even see the day when if a person falls ill 
while away from home, a local doctor can use this 
identification number to retrieve the patient's medi- 
cal history and drug reactions from a central data 
bank, 

On the opposite side of the ledger, the same 
electronic sensors that can warn us of an impending 
heart attack might be used to locate us, track our 
movements, and measure our emotions and 
thoughts, Experiments already are underway in the 
field of telemetering and significant breakthroughs 
are on the horizon. Similarly, the identification 
number given us at birth might become a leash 
around our necks and make us the object of con- 
stant monitoring, making credible the fear of the 
much fabled womb-tcMomb dossier. Finally, the 
administrative conveniences provided by the high 
degree of information centralization made possible 
through the widescale use of computers gives those 
who control the recordation and preservation of 
persona! data a degree of power over us that is 
unprecedented and subject to abuse, 2 

Close scrutiny and evaluation of the implications 
of data technology and information systems on in- 
dividual privacy are especially appropriate at this 
time because of the clarion in all quarters for the 
establishment of governmental and private data 
centers. For example, the United States Office of 
Education is supporting a migrant worker children 
data bank, the Department of Housing and Urban 
Development is sponsoring computerized municipal 
information systems and building files on housing 
loan applicants (with particular attention given to 
those who are ineligible), and President Nixon's 
welfare reform proposal (the Family Assistance and 
Manpower Training Acts) will give the Department 
of Health, Education and Welfare authority to ex- 
change individualized data with state welfare agen- 
cies and lead to the establishment of a national 
job applicant data bank, In other areas, we are 
seeing the emergence of criminal intelligence data 
centers, such as the Federal Bureau of Investiga- 

* Dombrowski v. Pfister, 180 U.S. 479, 487, §5 8. Ct, 1116, 1121 
(1965), 
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tion's National Crime Information Center (NCIC), 
and computer based credit rating services* As we 
look to the future, there is no doubt that the hypno- 
tic attraction of digital record-keeping will continue 
to envelope our universities, corporations, hospitals, 
and banks. 

Indeed, I believe that Americans today are 
scrutinized, watched, counted, recorded, and ques- 
tioned by more governmental agencies, social 
scientists, and law enforcement officials than at any 
other time in our history. Whether he knows it or 
not, each time a citizen files a tax return, applies 
for life insurance or a credit card, seeks govern- 
ment benefits, or interviews for a job, a dossier is 
opened under his name and his informational pro- 
file is sketched. It has now reached the point at 
which whenever we travel on a commercial airline, 
reserve a room at one of the national I^otel chains, 
or rent a car we are likely to leave distinctive tracks 
in the memory of a computer— tracks that can tell 
a great deal about our activities, habits, and as- 
sociations when collated and analyzed, Few people 
seem to appreciate the fact that modern technology 
is capable of monitoring, centralizing, and evalu- 
ating these electronic entries— no matter how 
numerous and scattered they may be. 

Federal agencies and private companies are using 
computers and microfilm technology to collect, 
store, and exchange information about the activities 
of private citizens to an astounding degree, Rarely 
does a week go by without the existence of some 
new data bank being disclosed. During the past 
year we have read of the Department of Housing 
and Urban Development's Adverse Information 
File, the National Science Foundation's data bank 
on scientists, the Customs B«reau ? s computerized 
data bank on "suspects," the Civil Service Com- 
mission's "investigative" and "security" files, the 
Justice Department's intelligence bank run by that 
organization's civil disturbance group, the fact that 
files on 2,6 million individuals are maintained by 
the Department of Transportation's National Driver 
Register Service, the Secret Service*! dossiers on 
"undesirables," "activists," and "malcontents,' 5 and 
the surveillance activities of the United States 



Army, These are only some of the federal govern- 
ment's data banks that have been brought to light; 
even now only the tip of the iceberg may be visible, 

By and large, these data gathering activities are 
well intended efforts to achieve socially desirable 
objectives* For example, in the law enforcement 
field, file-building is necessary to combat organized 
nrime and restore "Law and Order " In a Similar 
vein, the FBI and the Army can justify their in- 
telligence activities in terms of combating subver- 
sion or quelling campus disruptions and riots in our 
urbans centers by knowing who to watch or seize 
in times of strife. As to the information activities 
of credit grantors, private investigators, and in- 
surance companies, which involve considerable 
snooping into an individual's private life, it simply 
is good business to know as much as possible about 
a man before you lend him money, employ him, 
or insure his life. 

But there is a negative side to these mushroom- 
ing data banks— particularly those that bear the 
imprimatur of a governmental organization* Con- 
sider the information practices of the United States 
Army, Early last year it was revealed that for some 
time Army intelligence units were systematicully 
keeping watch on the lawful political activity of a 
number of groups and preparing "incident" reports 
and dossiers on individuals engaging in a wide range 
of legal protests, It must be emphasized that this 
monitoring not only covered society's "crazies" but 
included such nonviolent organizations as the 
NAACP, the ACLU S the Southern Christian Lead- 
ership Conference, and the Women Strike for 
Peace, and allegedly extended to newsmen, con- 
gressmen, and a former governor who is now a 
federal judge. 

Although there is considerable justification for 
certain types of information collection that are 
directly relevant to the Army f s duties, the develop- 
ment of dossiers on people pursuing lawful social 
and political activities bears little relationship to the 
function of the military— even to its function during 
periods of social unrest, This is especially true when 
many of those being scrutinized are eii;remely un- 
likely to be involved in riotous conduct, and the 
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selection of suspects seems to he governed by an 
incredibly simplistic theae-are-the-gooti-guyi-and- 
th«se-aie-lhe-bad-guys ap prcacli, Not mly is the 
&rmy ? s ftl^bnilding difficult to justify, but it ap- 
pears to have been undertaken without sufficient 
appreciation of tie fact that the creaticn and ex- 
posure of dossiers on people vtho are politically 
active could deter them from exm Mng their right 
to assemble, speak freely, m petition the govern- 
ment. 

The development of a number of oth^r informa- 
tion systems in the lav enforcement arena magnifies 
both the threat to personal privacy and the potential 
H cWlIifig effect" of inforniaricnal surveillan*?. Hie 
PBPs constantly expanding National Crime Infor- 
mation Center (prominently featured on the tele- 
vision series, "Hie FBI**) provides state and city 
police forces with immediate access to computerized 
flies oil ooany people, Although it currently only 
contains data on fugitives and stolen property, plans 
are being formulated to add arrest records and other 
types of information to the FBI system. Moreover, 
NCIC is the keystone of an emerging information 
network that will tie together the nation's law en- 
forcement information canters, By the end of 1969, 
the Crime Information Center reportedly *vas al- 
ready exchanging data with state and local police 
agencies tit every state except Alaska, State and 
local law enforcement surveillance systems also are 
becoming increasingly sophisticated— several with 
the aid of funding from the federal government un- 
der the Law Enforcement Assistance Administra- 
tion program, New York already has the essential 
features of a network fcuilt around a single computer 
center designed to store information for state and 
local agencies and permit tlieirJ to retrieve data 
through terminals placed threughout the st^te, An 
Ohio system allows 38 agencies to share its com- 
puterized information and Is connected both to 
NCIC md the Ohio State Highway patrol computer 
center; plans are underway to tic it to comparable 
systems in Keniucly and Indiana. 

If a citizen knows that his conduct and associa- 
tions are fceinj put **on ffle," and he knows that 
there is some possibility that the information mi jht 



be used to harass or injure hirra, he may become 
more con centred about the pcisitle content of that 
file and tess willing t« "stick his UMk out" In pur- 
suit of his constitutional rights. The effect may w 
(to paraphrase a tfioufht expressed by Jm\\& 
Brennan in m analogous context) to encourage 
Americana to keep their mouths shut on all oc- 
casions. 8 

If w really take our conitittitioiiai guarantees 
seriously, we cannot afford to stand by and allot* 
them to te debilitated hy this type of ecerciofj* 
Claims of governmental efficiency or the War against 
crime and subversion must not be allied tc justify 
every dernand for gaderwg persouai data, Beeau^ 
of the potential developmnt of a -record prisea*' 
mentality, no one should be surprised it some sujp< 
gest tint todays surveillance efforts contain tfr£ 
seeds of tie much dreaded police state or a return 
to McCarthyiitn, Nor is it sufficient that govern* 
mental agencies assure us that survaillartce and fij^- 
building are not being engajed in tor repressive 
purposes. Nineteen eighty-four is a state of mind; 
for many people, the appearance of repression m»y 
have trie impact of reality. 

To prevent any dowbt cn the point, I personally 
do not oppose intoiMtion lyitems or computerisa- 
tion of data, It strikes ma as foolish to prevent the 
use of a rnedern teehjaolo^ to garry out impOTtaiit 
governmental md nongovemiroiital operations slm^ 
ply because it mifht te abused, Tliis w especially 
true in our ccmpta* urbanised society and int^ 
economy, which rieiperately need data for sound 
national planning. Wecafinot turn the hpnds on th^ 
clock back, But this dees nit justify inaction* Even 
now we shouM r^copni^ the str^^g iinailafity b^ 
tureen the difficulties that gave rise to the multi- 
faceted regulation of airlines, automobiles, rail- 
roads, radio, end television and % prablerns that 
already ar^ generating pressure for tie mmpmhn^ 
sive regulation of data bsnks and computer com- 
munications. 

What Is necessary at this time is the development 

s Lopez v, United States, 373 U.S. 427\ 4SO, 83 5 I38l» m$$* 
(19*3) (dls s gfi(lng Gpiriicn), 
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of a framework for the protection of the public and 
th*e superimpositien of that framework on informa- 
tion practices at ail early date to minimize misuse of 
an otherwise socially desirable instrument. Hie 
problem of striking a balance between democracy 
aad iechnolojy has been a frequent and manage- 
able chore in the past and the nation's policy 
makers should not shrink from the task in this 
context- 
Let us turn now to the particular tensions be- 
tv^een contemporary data activities and privacy, 
Until recently, informational privacy has been rel- 
atively easy to protect for a number of reasons: (1) 
large quantities of information about individuals 
have not been available; (2) the available informa- 
tion generally has been decentralized; (3) the avail- 
able information tag been relatively superficial; (4) 
access to information has been difficult to secure; 
(53 people in a highly mobile society are difficult 
to keep track of; and (6) most people were unable 
to interpret and infer revealing Mcranation from 
data, 

But these protections were part of a bygone era 
aad are alien to our technologically based society. 
The testimony elicited before several committees of 
the United States Congress that have held hearings 
on privacy presents an astounding, and dishearten- 
ing, panorama of the ways in which die intruder! in 
our society, aided by the fruits of modern science, 
ha^ve destroyed many of these traditional bastions 
of privacy. 4 Revelations concerning the widespread 
use of spike and parabolic microphones* a variety 
of gadgets for electronic eavesdroping, cameras 
equipped with modern optical devices that enable 
photop^aphs to b# taken at a distance and under 
adverse weather or light conditions, demonstrate 
that we do not necessarily enjoy physical privacy 
in our homes or offices, on the street, or while tak- 
ing communion with a martini, 

Jfow, ever increasing resort to the computer, laser 
technology, and microminiaturization techniques 
has begun to erode our informational privacy* Be- 
cause the new technology makes it possible to in- 
tegrate personal information from a variety of 
sources, solicitation lists increasingly are becoming 



the product of wide-ranging file investigations into 
the backgrounds and finances of prospective cus- 
tomers. 5 Personal information can b^ used for com- 
mercial purposes, such as generating a list of cob- 
surners with certain characteristics. Header's Digest 
reportedly has used computer technology to produce 
a mailing Ust consisting of its subscribers 9 neighbors, 
'The approach had a kind of 'all (km neighbors are 
doing it* quality, 5 * said one commentator, "But, 
more significantly, the individual was pleased that 
the Reader's Digest kfiew him and could relate 
him to others on his block,'** 

It should be evident to all that we live in an in- 
creasingly information based society^ For example, 
ever since the federal government entered into the 
taxation and social welfare spheres* greater quanti- 
ties of information have been sought from citizens 
and recorded. Moreover, in recent years access to 
governmental or institutional largesse has increas- 
ingly depended upon i willingness to divulge private 
information. As recording processes have become 
cheaper and more efficients this data collection trend 
has intensified and been accompanied by a predi- 
lection toward centralisation and collation, The ef- 
fect is something akin to Parkinson's Law, As 
capacity for information handling las increased, 
there has been a tendency to engage in more ex- 
tensive manipulation and analysis of recorded data, 
^hich, in turn* has motivated the collection cf 
data pertaining to a larger number of variables* 
The availability of electronic data storage and r£* 
trieval has accelerated this pattern., as is made 
evident by comparing the questions cn a 1970 in- 



4 See generally Hearings e n federal Dm BanJit and the Bill of 
Rights Be far* the Subcomm. on Conttltutionsl Rights of tfa 
Comm. on the Judiciary, 9 1st Con£,« 1 S§si, (1971); Hiarinu 
Commercial Credit Bureaus ffefor* a Subcormn. of the HaU*i 
Comm. on Government Opera/ions* 90th Cong.^ 2d Se«, <1968); 
H taring! on Compute* 1 Privacy fie fore (he Subcomm, on Adminlsiffr 
five Practise and Procedure pf the Senate Comm. on the Judiciary, 
90th Cong,, 2d Sits, ( 1969) % Hearings on the Co^rilnstisn and Ifrft* 
gratien of Government Statistical ProsrarM Before the Subcormm, M 
Economic Staitsieg of the Joint Ecmomti Comm., 90th Ca&g*, Jit 
Sesi, (1967); Hearings on the Computer and Inmlom of Privacy 
Before s Subcomm, of the House Comm. on Govanmerti Operation*, 
89th Cong., 2d Sess. (1966), 

4 Set A. Miller, Thm Assault m Privacy! Computers t Mia Banfts, 
and Denim 7M5 (197IL 

*N,Y, Timss, July 30, Wl t mi 4! , col. 1, 
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com ta% form with those on 3 i960 torsi and the 
siiaificantly jreater Incidence of intmsive govern- 
mental, industrial, and acadeiriic questionnaires. It 
is no*v feasible to execute and evaluate these in- 
queries because cf tlie availability of machine pro. 
ecssing. 

I think it is reasonable to assume that one conse- 
quence of the advent of data centers and Increased 
computer capacity im that mmj governmental and 
private information gatJieii»g agencies Mil go be- 
yond current levels oi inquiry aJ id begin to asfcmore 
complex, proting, and ^ensitiy^ questions— perhaps 
ioto guch subjects as asscelatioiis with other people, 
location ^nd activity at different points of time and 
space, medical histoid, mi attitudes toward various 
institutions and persons* 

There are additional risks lurking in the ever-in* 
creasing reliance cn recorded inlormaUcn and third* 
paity evaluations of a person's past performance* A% 
information cumulate the contents of an iiidivU 
dual's computerised dossier appear more and more 
impressive, despite Che "softness" of much of tfce 
data, and impart to the usei a heightened sense of 
reliability* Coupled ^itti the myth of computer in* 
fallibility, this will mike it less likely that an in* 
dependent evaluation, will be made or that verifier 
tion of the data will be sought- Wt are beginning 
to see more and more adherence to tfte file in the 
credit granting, insurance, educational, and em* 
ployment fields. 

I knofir a talented ymiig ladjf who wm unable to 
gain employment for sowe lime following gradua- 
tion from college berate potential emjloyers were 
waiy of ax entry in lier university Hie that she be* 
came aware of alter mdny painful experiences, It 
said; M Me!inda-s mother is emotionally unstable." 
It turacd cut that this comment had b^en made by 
the girts sixth grade teaefcer* who was neither a psy= 
chMrfst nor a psychdogist and had only met the 
chiles mother eastiilly, Vet this damaging entry had 
been preserved and lad foEov^ed Belinda for 1 5 
yean without anyone questioning eith«r its reten- 
tion or its reliability* Thus* not surprisingly, many 
people have coma to feel that their success or failure 
in life ultimately ma^ twn on what other people 



put in tbeir file and an unknown propamine j ? s 
ability— or inability— to evaluate, prcxess, and in- 
terrelate information, Movero^ver* as things now 
stands a computerized fllg has, a certain inddible 
quality— an adversity not to be overcome with 
time, absent an electronic eraser and a compas- 
sionate soul willing to use it, 

The centratation of ioiorniition from vvidely 
divergent sources also exeates iericus problems cf 
information accuracy. I am not really speaking cf 
the literal accuracy of the input audi what is re- 
corded in the system, although that itself becomes 
a more serious problem as m Inereasa the content 
of dossiers and majpufsr the possibility cf error, 
Rathe*, I am concerned about foe rfaks of using 
data out of content. Information can be entirely ac- 
curate and sufficient in one contest and wholly 
complete and misleading in aacther* Consider ttoe 
fact that com puteriEatioa hai made it convenient to 
rate ui employee's effirieacy and psrsonsl habils 
according to concise* eonelusor^ categories inch as 
"excellent," **fairj M or **good* and teat organic 
tions oftefl lack common tradlticns of appraising or 
interpreting performafloe, Anyone not conversafit 
with military minds and moies might be enisled by 
a rating cf * 4 superhninaii 1 ' by th# United States 
Army* wftich might be equivalent to a rating of 
"qualified* 1 in a rtiotm demanding orgattization^ 

The problem of contextual aeenra^y ean fee 0- 
iuitrated in terms of one of tie mo^t dangerous 
typx?s of personal information currently nnaintato* 
ed— -the unexplained and inconiplete arrest record. 
Is it likely that a citizen whose file contains an entry 
Arrested, 6/1/42; convicted fdony, 1/6/43; 
sentenced, three years Leavenwirft" will te give» 
government employment or be accor^A Sonne of tl»e 
oth^r societal amenities of modern life? 7et oar 
subject simply may have been m coflieaentious ob- 
jector during the Seecnd World W. Consldw th« 
potential efleet of a Qompater entoy * 4 arreste4 ciinifr 
nal trespass; sentenced, £% rnonflis^ W^thowt mora, 
how will the user Jmcyw tbat cur eomptfteriaad man 
mm simply demonstrating for equal intfloymeiit iff 
the North or desegregation in the South in the 
1950 ? s and was convicted under a statute that wai 
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QV€rtume*I osi ajpeal as iwcocsititutionai res- 
traint on iree speech? 

In an era of giaat social actrvisitf on the part of 
thm young? with countergol 0t demands from others 
for *'Law and Orriir^' arrests ar « bound to increase. 
But many of them ^vill be «f » strikingly different 
character than what has been typical in the pan. 
It is iiow conamcpft far Jninctads of college demons- 
trators or black imlitants to bg arrested in connec- 
tion with one incident. XJsifig recent experience as 
i guides only a small fraction of the group vAll be 
pr©seoute4 aaid an ^ven snialler number convicted, 
/Ul of them, Jtowever, taave arrest records, Un- 
less these records show disposition, their circulation 
may have an improperly prejudicial effect* 

It also se^ms evident that the desirability of 
getting at a data center's cjaortfiQui store of infor- 
mation may Will offset the ditfbultfes of gaining 
access to its computerized fll^s ^nd deciphering 
them, which mm ocoasiooaliy offered as reasons why 
machine readable information is inherently more 
secure th^n ^Miiiially stored data. Even if we as= 
surie that the cost of securing access to comput- 
erized Mirf' is higher than *he <mt of dredging out 
the "dirt* w in 4 tnore traditional form of record, the 
centralize^ quality avid epw.pef M$$ of a computer- 
ized dossil emtesa^iaeeri^ to invade it because 
the payofl far doing so suCCisafuily way be suffi- 
ciently la^ge that the cost per isnlt of computerised 
4l dirt f * aeutall} will prove 10 be lower than the cost 
per unit of u aeornpisterized "dixt," 

It Bhuli act be forgotten tha^lthe risks to privacy 
created by data centers lie cot enly in abuse of the 
system by those ^ho desire to Injure others or who 
cam obtain sane personal advantage by doing so* 
There is a legitimate fe^r of Q^eMentalizinj indi- 
vidualized iaforniaticn and then proliferating the 
number people wlio* by living access to it p alio 
have the capacity to inflict damage through negli- 
gence, sloppfacsSj a»d sheer stupidity. Unthinking 
people ar« as capableof injuria J others by uninten- 
tionally rendering a record inaccurate, losing it, or 
disiecnin^ting its contents to Lgnauthotteed people, 
a§ are people aeting out of malice or for persona! 
aggraJidtetment 



What than is the solution? As an initial matter, 1 
one would hope that good judgment tad stlf-regu^ 
lation on the part of the LnfcmiatiOn gc*hering and 
using communities would suffice, Those ^ho handle 
individualized data— wfaetiher it be in the content of 
financial profiles in a credit bureau, student records 
in a school system, medical flies in a hospital, wel- 
fare lists in a governmental agency, or personnel 
data in a large corporation— have an obligation 4© 
guard the privacy of the human beings ^hose lives 
are reflected in those dossiers* But we must also 
come to grips with a basic fact of life concerning 
computerized Information systems. The only com- 
pletely effective guardian of individual privacy is 
the imposition of strict controls over the information 
that can be collected, stored, and disseminated* No 
procedural or technical safeguard is immune from 
human abuse or mechanical failure. 

Certain types of Information should not be r§* 
corded e^eii if it is technically feasible to do so and 
some administrative objective would be served 
thereby, It has long been technically "feasible" and ? 
from some perspectives^ ^desirable" to require 
citizens to cany and display passports when moving 
through the country, or to require universal finger- 
printing. But the United States has not pursued 
these objective! becatise they are considered incon- 
sistent vvith the philosophical fibre of our society, 
By the aame token, absent an overpowering de- 
mdnitration that the preservation of sensitive or 
highly personal information, such as medical and 
psychiatric information, or dosrier^type information 
on those pursuing lawful political and social acti- 
vities, is essential to some fundamental policy, the 
scrivener 1 ! hand should be stayed and the data per- 
mitted to be lost to man's memory or simply re- 
tained on a decentralized and highly confidential 
basis, 

Another form of self-regulation that seems es- 
sential is limiting access to data, Tfce hardware and 
software of my system dealing with personalized 
information must be designated to Bruit the ex- 
posure of fim to a limited class of people whose 
access is authorized only after a careful examination 
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of their need to know, Everyone making aft Inquiry 
into an individual file must be required to identify 
himself But ifcmuit be remembered that an identi- 
fication codi number assigned to each user or a 
magnetically cocked identification card can easily be 
lost, stolen, or exchanged* Thus, ultimately, finger 
or voice prints may prove to be necessary, In addi- 
tion, the system should be equipped with protector 
flies to record the identity of inquirers and these 
records should be audited periodically to determine 
whether the system is being misused by those who 
have a legitimate right of access, In the same vein, 
it probably will be necessary to audit the propams 
controlling the manipulation of the flies to make 
sure that i\o one has inserted a secret "door** in the 
protective software or modified it so that a partic- 
ular password will permit access to the data by 
unauthorized personnel. 

Because It is possible to move information Into 
or out of a computer over substantial distances by 
telephone lines or microwave relays connected to 
terminals scattered throughout the country and even 
beyond, it is essential that information be protected 
against wiretapping and other forms of electronic 
eavesdropping. This risk can be minimized by. 
coding the data or using "scramblers'* to garble the 
information before transmission and installing com- 
plementary devices in the authorized terminals to ' 
reconstitute the signal. These procedures also will 
prevent "piggy-backing" or "infiltrating" the system 
by surreptitiously attaching a terminal to an author- 
ized user's transmission line. 

To insure the accuracy of computerized flies, an 
individual should have access to any information in 
his dossier and an opportunity to challenge its 
accuracy* This principle has been recognized and is 
embodied in a new federal statute— the Fair Credit 
Reporting Act . 7 This enactment Is the first step 
toward eliminating iome of the abuses that result 
from the buying and selling of personal informa- 
tion by consumer reporting companies, most notably 
credit bureaus. It gives us a right of access to the 
files maintained on us by these organizations, pro- 
vides a procedure for correcting any errors we 
might find, assures us of no (ice when adverse 

T Pub, L, No. 91-508, 84 Stat, 1127-36, Ifi U.S.C, §§ 1601-77 (1970). 
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decisions are made on the basis of a consumer re- 
port, and places some restraints on the Investigative 
reporting conducted by these firms. Although the 
act is full of loopholes, its basic philosophical 
premise, that an individual has a right to see his file, 
is sound and must be extended to other contexts. 
Another approach might be to send a person's 
record to him once a year, This suggestion obviously 
may prove expensive, some will argue that the value 
of certain information will be damaged if its ex- 
istence and recordation are disclosed, and it might 
produce a fid of petty squabbles that would entail 
cosily and debilitating administrative or judicial 
proceedings. Nevertheless, the right of an individual 
to be protected against the dissemination of mis- 
information about him is so important that some 
price must be paid to effectuate it> 

Finally* the Information must not be allowed to 
petrify. Data that is shown to be inaccurate, or 
archaic, or of little probative value, should be 
deleted, reclassified, or its age brought to the 
attention of a user of the file, 

But what if self-regulation falls? Indeed, can we 
afford the .luxury of waiting to find out? It seems 
clear to me that the legal profession must become 
more active in finding a solution to the computer- 
privacy dilemma. Unfortunately, we cannot be too 
sanguine about the existing legal structure's ability 
to meet the challenge. The common law of privacy 
traditionally has been preoccupied with the prob- 
lems raised by the mass media and has concerned 
itself with the commercial exploitation of a name or 
likeness, the offensive intrusion into an individuafs 
personal affairs, the widespread public disclosure of 
private information, and the "false light" cast on 
individuals by media disclosures,* 

In the constitutional law arena, recent cases 
seeking the expungement of files maintained by law 
enforcement agencies have been largely unsuccess- 
ful^ Despite strong arguments that the preservation 

*§0t A Xfilier, supra note 5, at 17M9, 

* See Anderson v, Sills, 56 N.J. 210, 2^5 A.2d 671 (1970), rwv l g 
\M NJ, Super, 545, 256 A,2d 199- OP693, S§€ also Menard v, 
Mitchell, 430 F.2d 486 <DX Cir. 1970). Judge Gescll's opinion on 
remand in the Menard ease ftflitti a very balanced and sophist leafed 
approach to the data bunk question, Menard v. Mitchell/ Civil No. 
3M| (D, D,C, June 15, 1971), 
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of detailed Infofttiation directly infringes the data 
subjects' right off assoditional privacy under the 
first amendment* no relief usually is given because 
of a judicial concern over the government's need 
to be able to deal with Imwlesgfteis, Furthermore, 
any privacy action based on constitutional rights 
will have to avoid the inhibiting effect of the Su- 
preme Courtis decision in Time, Inc. v. Hill™ 
which Imposes a heavy burden of proof on the 
party seeking relief for an invasion of privacy. 11 
The effect of that case is to give the media sub- 
stantial immunity from liability for Invasions of 
privacy in order to provide "breathing space" for 
freedom of expression, I think it Is fair to say that 
this decision partially aborts the common law right 
of privacy's capacity for doctrinal growth. 

The judicial vineyards are not completely blighted, 
however. The right of associafional privacy is prob- 
ably the most clearly developed of the constitu- 
tional protections for personal information. Thus, 
when the government attempts to gather data from 
an individual concerning his association with a 
group dedicated to the advancement of certain 
beliefs, it must show that the information sought is 
a subject of overriding and compelling state in- 
terest, 12 Closely related to assoeiational privacy is 
another type of privacy that thfr courts have pro- 
tected—the right to possess ideas and beliefs free 
from govern mental intrusion. The leading case in 
this area, Schneider v. Smitk, 13 makes it clear that 
espousing an unpopular idea is riot a scar a person 
must show upon inquiry for the remainder of his 
life. 

In a related field, a number of eases protect our 
physical privacy from unreasonable searches and 
seizures and guarantee us the "right to be let alone" 
in what have been described as u iones of privacy." 14 



U.S. 374, 87 S, Ct. 534 (1967). 
» Sre A. Miller, supra note 5, it ]9f>99. 

™Sre NAACP v. Alabama, 357 U.S. 449, 78 S. Ct. 1163 (1558), 
See aha Gibson v. Florida Legislative Invest igatign Conufi.i 372 U.S. 
«9, 83 S, CL 889 <19€3). 

"390 U s S a 17, 88 S, Ct, 682 CJ268K 

"See Stanley v. Georgia, 394 U.S. 537, 39 S, Ct, 1243 (1969); 
Ktitz v. United States, 389 U.S. 347. 350 n.S. 88 S. Ci, 507, SlB-H 
nj (1967); lergef v. New Yerk, 388 U3. 41, 87 S, Ct, 1873 (1967), 



This view is exemplified by Grimold v. Con- 
necticut, •* which struck down Connecticut's at- 
tempt to regulate the use of contraceptive devices, 
However, a recent Supreme Court decision up- 
holding the right of welfare authorities to terminate 
benefits if they are not given access to the welfare 
beneficiary's home under certain circumstances 
seems to look the other way, 16 On the plus side, 
mention also should be made of Wisconsin v, Con~ 
stontineau t u which appears to have infused due 
process notions into the use of information by re- 
quiring that when a person's reputation, honor* or 
integrity is jeopardized by a governmental dissemi- 
nation of personal information, a minimal level of 
procedural fairness must be satisfied* But peculiari- 
ties in Cotisrantimaii caution us against expecting 
too much from it. 

But these decisions simply represent the outer 
boundaries or constitutional limits on governmental 
action— they do not give us the standard for achiev- 
ing the balance that is desperately needed. That will 
have to come from the legislature, Legislative 
activity in the computer-privacy field might take a 
number of different forms. One simple and highly 
desirable statutory approach would be to prohibit 
governmental, and perhaps even nongovernmental, 
organizations from collecting designated classes of 
sensitive data, This might be reinforced by a statu- 
tory requirement and computerized flies be peri- 
odically purged of all data that has become too 
ancient to be trustworthy. Of course, any proposal 
that would have the effect of impeding ihg govern- 
ment^ information practices faces an uphill battle 
in the political arena. 

A somewhat different, and in many ways more 
drastic legislative approach, involves requiring 
computer manufacturers, users, and data networks 
to employ prescribed safeguards for maintaining 
the integrity of personal information. This can take 



^381 U.S. 479*81 5. 1678 <!?65). 

"Wmrnn v. James, 400 U.J, 309, 91 S. Ct, 381 U971 ), See 
generally Burt* Forcing Protection art Children m& Their Patents? 
The impact of Wtm*n W James, 69 Mich. L. Rev, 1259 (1971), See 
also Law Students Civil Rights Research Council, lnc, v. Wadmnnd, 
401 U.S. 154, 91 S, Ct. 744 (1971), 

it 400 U.S, 433, ?! S, Ct, 507 (1971). 
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the font* of (1 ) imposing a statutory duty of care 
go everyone connected with the data-handling 
process* which would encourage privacy conscious- 
ness, or of (2) enacting detailed privacy-oriented 
technical requirements, which would have to be 
followed by computer manufacturers. These would 
include sophisticated protective schemes involving 
access regulations, personnel controls, and mechani- 
cal devices that can discriminate among users and 
differentiate data on the basis of sensitivity that 
would have to be complied with by handlers of 
personal information. 

But detailed congressional legislation is difficult 
to draft and the best solution may be to give over 
the task of regulation to an administrative agency 
that would act as an information ombudsman or a 
privacy auditor. The notion of an independent in- 
formation agency is not a new one, Many of the 
congressional witnesses and commentators on the 
proposal to create a National Data Center, myself 
included, stressed the importance of locating control 
of such an organisation outside the existing regula- 
tory frameworkJ 11 Administrative regulation would 
obviate the need to make highly detailed policy 
judgments in statutory form at what may be a 
premature time. It also would guarantee that the 
problem is placed in the hands of a watchdog 
group, hopefully composed of experts drawn from 
many fields, that could exercise continuing super- 
vision over the data handling community, 18 

A number of Congressmen already have recog- 
nized the need for some controls and have intro- 
duced legislation to protect privacy. Unfortunately, 
the activity is somewhat reminiscent of Leacock's 
Mm, who jumped on his horse and rode off in all 
directions at once. Bills have appeared to regulate 
credit bureaus, mailing list companies, the census, 



^See gearings en Computer Privacy Be fare the Sub comm. en 
Administrative Practice and Procedure of the Semate Comm. 0» the 
Judiciary* 9Cth Ceng,, 2d S#ss, (1968) (stitfem^nt Of Professor 
Arthur R. MiUef) i Note, Privacy end Efficient Government: Pro- 
p&x&tM lor a /Motional Data Crnfrr, 82 ffsrv, L r Rev, 4fl0 ? 404 
£*i she Ru&gles, On the Needs and Value* of Oafa Banks, 
In SympQJlitm^^&ffiptiiefs, Data Banks, mnd individual privacy ; 53 
Minn. L Rev, 211- 218*19 (1963); Zivicfc* A National Data Center, 
in A.B.k. Section ef Individual R/phU and Responsibilities, Mono 
gtmph No. I F at 32, 33 £1967)* 

»Tlils theme is developed In A, Mifl#r* mpm nete 5, at 228-38. 



employee privacy, government inquiries, and psy- 
chological testing. Thus far only the Fair Credit 
Reporting Act, mentioned earlier has been enacted 
Into law. But Senator Ervin and Conpessmen 
Gallagher and Koch have proposed broad regula- 
tion of computers and data gathering activities and 
we can expect continued activity in this field for 
some time, 

When the dust ultimately settles, I hope we shall 
have struck the necessary balance, This probably 
will require give on both sides. No doubt we can 
coerce, wheedle, and cajole an individual into giv- 
ing up part, or even all, of his informational profile. 
But what price would we pay for it? Alienation, 
distrust of the government, deceptive responses, 
obfuscation of certain data gathering objectives (as 
I think may be true of the census goal of enumerat- 
ing the population), numbing of privacy values, 
and an atmosphere of suspicion, Instead of the 
stick, perhaps we should rely on the carrot Govern- 
mental and private planners must refine their in- 
formation handling techniques, reduce the burden 
on the individual, and assure us accuracy of the 
flies and security against improper dissemination. 
If this is done, perhaps we will feel less apprehen- 
sive about yielding a little of ourselves. Few aspects 
of life, even in a free society, can survive as 
absolutes— and that includes privacy, 

If some of my remarks seem slightly alarmist in 
tone, it is because I feel it is necessary to counter- 
act the syndroms referred to by the poet ee, cum- 
minings, when he wrote "progress is a comfortable 
disease/' 20 We must overcome the alMoo-often 
complacent attitude of citizens toward the manage- 
ment of our affairs by what frequently are astig- 
matic administrators in both government and the 
private sector. The very real benefits conferred by 
information technology may opiate our awareness 
of the price that may be exacted in terms of per- 
sonal freedom. It thus seems desirable to sound the 
klaxon to arouse a greater awareness of the pos- 
sibility that the computer is precipitating a realign- 
ment in the patterns of societal power and is be- 



*°e.e. euniniinis, jQQ Selected Poems 19 (paperback fed, 



no 



115 



APPENDIX VI 



coming an increasingly important decision-making 
tool in practically all of our significant govern- 
mental and nongovernmental institutions. As society 
becomes more and more information oriented, the 
central issue that emerges to challenge us is how to 
contain the excesses and channel the benefits of 
this new form of power* 

If the concept of personal privacy is fundamental 
to our tradition of individual autonomy, and if its 
preservation is deemed desirable, then I feel that 
the expenditure of some verbal horsepower on its 
behalf is justified Unless we overcome inertia, 
there will be no one to blame but ourselves if soma 
day we discover that the mantle off policymaking is 
being worn by those specially trained technicians 
who have found the time to master the machine and 
are using it for their own purposes, To paraphrase 
the French sociologistj Jacques EIIuI, that it is to 
be a dictatorship of dossiers and data banks rather 
than of hobnailed boots will not make it any less a 
dictatorship. 21 

- 1 J. Ellul, The Technological Society 434 (paperback cd. 19641, 



118 



in 



ERIC 



Appendix VII 



RECORDS, COMPUTERS, AND 
THE RIGHTS OF CITIZENS * 

by Willis H. Wars 



In early 1972, then Secretary of Health, Educa- 
tion and Welfare Elliot Richardson, created a special 
advisory committee charged with analyzing harm- 
ful consequences that might result from automated 
personal data systems, and which was to make 
recommendations about safeguards that might pro- 
tect individuals against potentially harmful conse- 
quences and afford them redress for any hams, 
Since the social security number has been widely 
used as a personal identifier, the committee was 
also asked to examine the policy and practice re- 
lating to the issuance and use of such numbers. On 
July 31, 1973, the committee submitted its final 
report to current H.E,W a Secretary Casper Wein- 
berger, with Attorney General Elliot Richardson in 
attendance, ** 

As a document intended for busy government 
officials, this report included a summary of its 
findings in the early pages. In addition, the press 
conference at which it was released briefly sum- 
marized its findings and recommendations; and as 
one might expect, the initial press coverage high- 
lighted the committee recommendations instead of 
giving a careful exposition of the rationale by which 
the position had been reached, To put the findings 
of this committee in perspective and proper con- 
text, the following discussion draws on selected 
segments of the report. 

The central issue of concern is the record- 
keeping practices of the government and private 
agencies that deal with personal information about 
people. While not all such records are maintained 
by computer, those that are become of special con- 
cern because the concentration of information with- 
in computer files at one location, and the access to 
such files through remote access terminals tend to 
magnify the opportunities for misuse of personal 
information. Relative to the totality of the record- 
keeping systems that surround each of us today, any 
one individual finds himself at a significant dis- 

* Reprinted with permission of Datamation. Copyright 1973 by . 
Technical Publishing Company, Greenwich, Connecticut 06S3O, 

* • Records. Computet! and the Mights of Citizens" Report of the 
Secretary's Advisory* Committee Oil Automated Personal Data Sys* 
tems. DHEW Publication Number (OS) 73-94. Government Printing 
Office* Stock No, 17O0-O01 16, for gale by the Superintendent of 
Documents, U.S. Government Printing Office. Washington, D<C* 20401, 



advantage to affect the content of the records or to 
limit their usage. Most of us have suffered at least 
the annoyance of having to cope with a computer- 
based system that, outwardly at least, appears not 
to care how it has mistreated us, or worse, has 
given a false impression or subjected us to harass- 
ment, It is, of course, true thai the computer itself 
is not the culprit; rather the system designers have, 
for whatever reasons, seen fit not to create humane 
systems that are considerate of the data subjects 
about whom information is held, Thus, in the 
struggle to protect the personal privacy of the 
citizen, the preferred solution would adjust the 
balance of power between citizen and record system 
in such fashion that the individual has the oppor- 
tunity and the mechanism to contest, correct, and 
control personal information held about himself. 

It is helpful to review suggestions that have been 
made to deal with the matter of protecting data 
subjects against harm. One proposal has been to 
license and certify computer programmers and 
systems designers, with the hope that such a pro- 
cedure would improve the care with which record- 
keeping systems are designed and operated* While 
s e nuredly useful, it cannot of itself adequately pro- 
tect data subjects against potential harm. The best 
designed system in the world cannot prevent author- 
ized users of the system from maliciously using the 
information. More to the point, however, a certifi- 
cation approach would put the responsibility for a 
properly designed and controlled record system In 
the wrong place. The responsibility should be upon 
the organization that assembles the system, initiates 
its design and operates it, not upon the technical 
professionals who implement it, 

A second suggestion is the ombudsman approach 
that has been used for many years in Scandinavian 
countries. Basically, the ombudsman is a spokes- 
man for an individual who has been harmed; he 
serves essentially as a communication channel be- 
tween the person and a bureaucracy in matters of 
dispute* While the concept is a useful third-party 
mechanism to facilitate resolution of an argument, 
it is not well-established in this country f nor is it a 
sufficiently broad and powerful force to bring about 
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essential changes in how record-keeping systems are 
designed and deterred from inappropriate behavior* 
There have been many definitions of privacy, all 
of which contain the common element that personal 
data is bound to be disclosed and that the data sub- 
ject should have some hand in deciding the nature 
and extent of such disclosure. As the committee 
phrased it, "personal privacy as it relates to personal- 
data record keeping must be understood in terms of 
a concept of mutuality," The organization that 
holds personal data must not have complete control 
over it and, conversely^ neither may the data 
subject— each has a stake in seeing that the infor- 
mation is used properly, As part of the committee's 
definition of privacy, it was suggested that, "a 
record containing information about an individual 
in identifiable form must ... be governed by pro* 
cedures that afford the individual a right to par- 
ticipate in deciding what the content of the record 
will be and what disclosure and use will be made 
of the identifiable information in it. Any recording, 
disclosure and use of identifiable personal informa- 
tion not governed by such procedures must be pro- 
scribed as an unfair information practice unless 
such recording, disclosure or use is specifically 
authorized by law/* 

Thus, the committee concluded that safeguards 
for personal privacy based on such a concept of 
mutuality in record-keeping, requires adherence by 
record-keeping organizations to certain fundamental 
principles which collectively define fair information 
practice. We proposed that: 

There must be no personal-data record-keeping 
systems whose very existence is secret, 
There must be a way for an individual to find out 
what information about him is in the record and 
how it is used. 

There must be a way for an individual to prevent 
information about him obtained for one purpose 
from being used or made available for other pur- 
poses without his consent. 
There must be a way for an individual to correct 
or amend a record of identifiable information 
about him, 



Any organization creating, maintaining, using, or 
disseminating records of identifiable personal 
data must assure the reliability of the data for 
their intended use and must take reasonable pre- 
cautions to prevent misuse of the data. 

The principles just given are considered by the 
committee to be the minimum set of rights that 
should be available to the individual The question 
becomes how to extend these rights to the citizen. 
An obvious mechanism, and one that has been 
suggested many times, is the creation of a centralized 
federal agency to regulate all automated personal 
data systems. Such an agency would be expected to 
register or license the operation of such systems, 
could establish specific safeguards as a condition of 
registration or licensure, and would generally be 
the watchdog over all public and private data banks. 
Because systems used by the enormous number and 
variety of institutions dealing with personal data 
vary greatly in purpose, complexity, scope and 
administrative context, an agency to regulate, 
license, and control such a breadth of activity would 
have to be both large-scale and pervasive, The pro- 
cedures for regulation or licensing would become 
extremely complicated, costly, and might unneces- 
sarily interfere with desirable application of com- 
puters to record-keeping. Moreover, such a regula- 
tory body would be another instance of federal 
government intrusion into toe affairs of industry* 
the citizen, and other levels of government. 

Thus, the committee has proposed a solution that 
was felt to provide the citizen with equally strong 
rights, while at the same time avoiding the neces- 
sity for a regulatory body, ft has recommended 
that there be created by legislation a code of fair 
information practice applicable to all automated 
personal data systems, This code would define "fair 
information practice" as adherence to specified safe- 
guard requirements, would prohibit violation of any 
requirement as an unfair information practice, 
would provide both civil and criminal penalties for 
unfair information practice, would provide for in- 
junctions to prevent violation of any safeguard re- 
quirements and, finally, would permit both individual 
and class action suits for actual liquidated and 
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punitive damages. This approach, the committee is 
convinced, would not impose constraints on the 
application of EDP technology beyond those neces- 
sary to assure the maintenance of reasonable 
standards of personal privacy in record-keeping. It 
would imply no new federal bureaucracy, and en- 
forcement should be inexpensive at the government 
level Importantly, this approach exploits the 
established legal and judicial institutions and prac- 
tices of the country, and through court decisions 
and judgments can provide an adaptable solution 
that reflects shifts in the attitudes of society. From 
the standpoint of industry, the monitoring of fair 
information practice would become a matter for 
the General Counsel's office, as he Is already con- 
cerned with fair labor practice and other require- 
ments levied by law. 

We were led to this concept by noting that 
organizations operating personal automated data 
systems should be deterred from inappropriate prac- 
tices rather than being forced by regulation to adopt 
specific practices* The most universal deterrent 
seems to be financial, and thus we structured our 
code and its safeguards in terms of financial penal- 
ties; this is already the case in many other damage- 
recovery procedures under law. 

To implement such a fair information practices 
code we suggest certain safeguard requirements, 
One set stipulates that: 

any organization maintaining an administrative 
automated personal data system shall identify one 
person immediately responsible for the system, 
shall take affirmative action to inform each of 
its employees about the safeguard requirements 
and rules and procedures governing the conduct 
of the system, 

shall specify penalties to be applied to any em- 
ployees who violate the safeguard, 

shall take reasonable precautions to protect data 
in the system from anticipated threats or hazards 
to the security of the system, 

shall make no transfer of identifiable personal 
data to another system unless such other system 
also fulfills the safeguard requirements, etc. 



A second set deals with the public notice require- 
ment and stipulates that any organization maintain- 
ing an administrative automated personal data sys- 
tem must give public notice of the existence and 
character of the system once each year, Further- 
more, any organization "proposing to establish a 
new system or to enlarge an existing system shall 
give public notice long enough in advance . . . to 
assure individuals who may be affected by its 
operation a reasonable opportunity to comment," 
Finally, a third set stipulates the rights of in- 
dividual data subjects and includes such things as 
any organization maintaining an administrative au- 
tomated personal data system: 
Shall inform an individual when asked to supply 
personal data whether he is legally required or 
may refuse to supply the data requested. 

Shall inform an individual upon request whether 
he is the subject of data in the system and, if so, 
make such data fully available to him, 
Shall assure that no use of individually identifi- 
able data is made that is not within the stated 
purposes of the system. 

Shall inform an individual, upon request, about 
the uses made of data about him, including the 
identity of all persons and organizations involved 
and their relations with the system. 

Shall assure that no data about an individual are 
made available in response to a demand for data 
by means of compulsory legal process unless the 
individual to whom the data pertains has been 
notified of the demand, 

Shall maintain procedures that allow an individual 
who is the subject of data in the system to con- 
test their accuracy, completeness, pertinence, and 
the necessity for retaining them; that permit data 
to be corrected or amended when the individual 
so requests, and assure when there is disagree- 
ment that the individual's claim is noted and in- 
cluded in any subsequent disclosure or dissemina- 
tion of the disputed data. 
We regard the safeguards just outlined as a 
minimum set. Whither they are exactly the proper 
set of course can be debated. The important point 
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is that a cade of fair information practice defined in 
terms of certain safeguards is a viable and, so far 
as can now be seen, adequate solution to tbe prob- 
lem of protecting personal privacy, 

Systems that maintain personal data in identifi- 
able form are also used for statistical reporting and 
research* In such applications, the identification is 
usually stripped from the data and aggregated, or 
statistical assessments are made. There are other 
systems, usually called statistical-reporting and re- 
search systems, that never deal with identifiable 
data. For each of these, the appropriate set of safe- 
guards is slightly different but, in general, acts to 
the same end. 

The second major issue to be considered by the 
committee was that of the social security number 
and its growing status as a standard universal 
identifier. The initial press coverage of our report 
stated simply that we were against the use of the 
social security number as a personal identifier but 
excluded the supporting arguments. 

The committee included both DP experts and a 
number of individuals each responsible for the 
operation of large record-keeping systems. It was 
certainly understood by all that a standard universal 
identifier that could be assigned to an individual 
for his lifetime has positive value. Our argument 
against the use of the social security number rests 
partly on the fact that this number is not a good 
candidate for a standard universal identifier. For 
example, the Social Security Administration esti- 
mates that more than 4.2 million people have two 
or more social security numbers; thus, the ism is 
not adequately unique. Furthermore, the ssn has 
no check feature and most randomly chosen nine- 
digit numbers cannot be distinguished from a valid 
ssn. For these and other reasons, the ssn is not 
adequately reliable as a standard universal identifier. 

There is a much more important aspect than the 
shortcomings of the social security number as a 
potential de facto standard universal identifier, 
There has not yet been a public debate on tbe issue 
of a personal identifier nor has there been an assess- 
ment of the social consequences. Moreover, there 
are inadequate legal and social safeguards against 



abuse of personal information contained in auto- 
mated personal data systems. In view of these 
facts, we take the position that "a standard uni- 
versal identifier should not be established in the 
now or in the foreseeable future.* 1 However, 
we acknowledge that a standard universal identifier 
does have positive social value in some circum- 
stances and we would urge that the question surely 
be reexamined when adequate legal and social safe- 
guards have been established and shown effective in 
protecting the personal privacy of the individual 
citizen. 

Meanwhile, in order to constrain the spread of 
the ssn as a de facta standard identifier, we recom- 
mend that 

uses of the number be limited to those necessary 
for carrying out requirements imposed fay the 
federal government, and 
that federal agencies and departments should not 
require nor promote use of the ssn except to the 
extent that they have specific legislation man- 
dated from the Congress to do so, 

To further restrict the spread of the ssn in its 
identifier role, we recommend that legislation be 
passed that: 

Gives the individual a legal right to refuse to 
disclose his social security number to any person 
or organization that does not have specific 
federal authority to request it 

Provides that an individual have the right to 
redress if his lawful refusal to disclose his social 
security number results in the denial of a benefit 
or the threat of denial of a benefit. 

Requires that any oral or written request made 
to an individual for his social security number be 
accompanied by a clear statement indicating 
whether or not compliance with the request is 
required by federal statute and, if so, citing the 
specific legal requirement, 

We have also made a number of other recom- 
mendations with regard to the ssn, the net effect of 
which is to restrict its use to those purposes man- 
dated by federal law, to urge the Social Security 
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Administration not to assign numbers to children 
below ninth grade level, and to give the ssn the 
status of a confidential item of information. 

In the struggle to assure and protect the privacy 
of the individual and to afford him redress against 
any harm that might befall him through the opera- 
tion of an automated personal data system, we are 
convinced that adequate deterrents against abuse of 
personal information can be provided through the 
mechanism of a code for fair information practice, 
We believe that a regulatory approach Is neither 
necessary nor desirable. With regard to the role 
that the social security number plays in the dis- 
semination of personal information and the linking 
of items of personal information coming from dif- 
ferent sources, we are convinced that the American 
public has not yet adequately considered the impli- 
cation of a standard universal lifetime identifier and 
we, therefore, take the position that until such con- 
scious debate has occurred, and until adequate 
social and legal safeguards against abuse of personal 
information exist and have been shown to be effec- 
tive* the ssn should be tightly constrained as to its 
use, 
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Appendix VIII DATABANKS IN A FREE SOCIETY: 

A SUMMARY OF THE PROJECT 
ON COMPUTER DATABANKS * 

by Professor Alan F, Westin 

Department of Political Science, Columbia University 



Bas#d on a summary of the Projict on Computer Date* 
banks and of its report "Databanks in a Fjret Sedety** 
published 1972 by quadrangle Books, a New York Tiroes 
Company, 330 Madison Ave.* New York* N,Y* 10017. 

The United States has become a records- 
oriented society. 

In each major zone of personal and civic life 
(education, employment, credit, taxation, health, 
welfare, licensing, law enforcement, etc), formal, 
cumulative records are assembled about each of 
us by hundreds of private and government record- 
keeping organizations. These personal histories are 
relied on heavily by the collecting organizations In 
making many decisions about our rights, benefits, 
and opportunities, Informal networks for sharing 
record-information among public and private or- 
ganizations have become a common feature of 
organizational life heavily dependent on credentials. 

During the past two decades, as most government 
agencies and private organizations have been com- 
puterizing their large-scale files, the American pub- 
lic has become concerned that dangerous changes 
might be taking place in this record-keeping process. 
Because of the computer's enormous capacities to 
record, store, process, and distribute data, at great 
speeds and in enormous volumes, many people 
have feared that far more personal data might be 
assembled about the individual than it had been 
feasible to collect before; that much greater sharing 
of confidential information might take place among 
the holders of computerized records; and that there 
might be a lessening of the individual's ability to 
know what records have been created about him, 
and to challenge their accuracy or completeness, 

The book Databanks in a Free Society (currently 
being published by Quadrangle Books* a New York 
Times subsidiary) is the report of the first nation- 
wide, factual study of what the use of computers Is 
actually doing to record-keeping processes in the 
United States, and. what the growth of large-scale 
databanks, both manual and computerized, implies 



* Reprinted with permission from "Computers and Automation?* 
January 1973* copyright 1973 by and published by Berkeley Enter- 
prises, Inc. 815 Washington St„ Newtonville* Mass, 02160, 



for the citizen's constitutional rights to privacy and 
due process, This article is a summary of the book. 
The book also outlines the kinds of public policy 
issues about the use of databanks in the 1970's 
that must be resolved if a proper balance between 
the individual's civil liberties and society's needs 
for information, is to be achieved. 

How the Study was Conducted 

The book is the report of the "Project on Com- 
puter Data Banks", a three»year research study 
conducted under the auspices of the Computer 
Science and Engineering Board of the National 
Academy of Sciences, under grants of $164,000 
from the Russell Sage Foundation, The Director of 
the Project was Dr. Alan F. Westin, Professor of 
Public Law and Government, Columbia University, 
and author of Privacy and Freedom, published in 
1967. An inter-disciplinary staff of seven scholars 
from the fields of law, computer science, and the 
social sciences collaborated in the research. The 
project received continuing guidance not only from 
the Computer Science and Engineering Board but 
also a special Advisory Board of 18 prominent 
figures in public life whose views spanned the full 
spectrum of opinion on issues of databanks and 
civil liberties,* The final report of the project was 
written by Dr. Westin and Mr. Michael A. Baker, 
Assistant Director of the Project, and an Instructor 
in Sociology at Brooklyn College of the City Uni- 
versity of New York, 

Sources 

The major sources collected and used by the 
Project include* 

1 . Documentary materials on computerized record 
systems in more than 500 government agencies 
and private organizations. 

2, Detailed on-site staff visits to 55 of the most 
advanced computerizing organizations, ranging 
across the most sensitive fields of personal 
record-keeping. 

* Names or staff and Advisory Board members appear later in this 
summary, 
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i over 1500 organizations in a 
I survey of developments in com- 
and record-keeping among govem- 
s and private organizations, 

lerviews with officials from com- 
mies, software houses* systems 
rms, industry associations, civil 
ps, labor unions, consumer organi- 
>rity-rights organizations, and pro- 
tciattons. 

itive and regulatory-agency ma- 
g with databank issues in 25 dis- 
elds of personal record-keeping, 

1 interviews on the state of data- 
>monts and regulatory controls in 
itions, for purposes of comparison 
:ed States, 

the Report 

organized into Ave parts: 

s a brief, orienting discussion of 
s and civil liberties concepts for 

? of "profiles 1 * of 14 governmental, 
private organizations, drawn from 
he Project staff made on-site visits. 
:ribes the nature and function of 
its pre-computer record-keeping, 
lputer usage, the effect of automa- 
d-keeping about people, previous 
iues involving the organization's 
seping, the effect of computerize- 
ties protections, and the organiza- 
jrther computerization in the next 

zations given this detail treatment 

il Security Administration 
ational Crime Information Center 
Missouri) Police Department 
te Department of Motor Vehicles 
aven, Connecticut 
lunty, California 



Bank of America 

TRW— Credit Data Corporation 

Mutual of Omaha Insurance Company 

Ft L, Polk & Company 

Massachusetts Intsitute of Technology 

Church of Latter Day Saints 

Office of Research, American Council on 

Education 
Kaiser-Permanente Health Plan 

Part III has three chapters which present and 
analyze the Project's principal findings. These in- 
clude an overview of what kinds of files have and 
have not been computerized In advanced organiza- 
tions; an analysis of computer effects on civil 
liberties that are not taking place as yet; and a 
description of those changes in record-keeping that 
the use of computers and communication systems is 
producing in these organizations. 

Part IV is an analysis of the way in which the 
reception of computer technology is affected by 
organizational, legal, and socio-political factors, 
followed by a forecast of developments in new 
computer and communications technologies that are 
likely to occur in the remainder of the 1970% 
and an analysis of their implications for civil liberties 
interests. 

Part V discusses public policy choices in the 
I970's in light of the project's findings and fore- 
casts. The first chapter analyzes the larger socio- 
political significance of the computer's arrival in 
the late 1950's and 1960's; it goes on to suggest 
the basic civil liberties principles that ought to be 
followed when seeking to safeguard citizen rights 
in large-scale record systems, especially in the in- 
creasingly computerized sectors of American or- 
ganizational life. The* final chapter of the report 
presents an agenda for the 1970's, identifying six 
areas of priority for public policy and civic action, 

Three appendixes to the report present: the re- 
sults from the Project's survey of organizations; an 
analysis of public opinion literature on privacy and 
the computer; and information about the experience 
of other advanced industrial nations in dealing with 
the databanks-and-privacy problem. 
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Highlights of the Report 

A great many commentators have warned that 
the spread of computers is fundamentally altering 
the balance between information policies of organi- 
zations and individual rights to privacy that marked 
past eras of record-keeping. Compared to what was 
done in the manual era, it is said, the new capacities 
of the computer inevitably lead organizations: to 
collect more detailed and intrusive personal infor- 
mation about individuals; to consolidate confidential 
information from previously separate flies; and to 
share confidential personal data with government 
agencies and private organizations that had not 
received it before. 

The Project's findings from visits to 55 organiza- 
tions with highly advanced computer applications 
is that computerization is not yet having such effects 
in the overwhelming majority of such organizations. 
For a combination of technolopcal and organiza- 
tional reasons, central databank developments are 
far from being as advanced as many public com- 
mentaries have assumed. Organizations have so 
far failed to achieve the "total" consolidation of 
their information about individuals which raised 
civil liberties alarms when such goals were an- 
nounced in the 1960's by various government 
agencies or private organizations, 

Continuance of Policies 

Further, in computerizing their records on in- 
dividuals, organizations have generally carried over 
the same policies on data collection and sharing that 
law and administrative traditions in each field had 
set in the pre-computer era. Where new law or prac- 
tices have evolved to protect individual liberties 
over the past decade, organizations with com- 
puterized systems have followed such new policies 
as fully as those that still use manual files and pro- 
cedures. Even the most highly computerized or- 
ganizations continue to rely heavily on manual 
record-keeping and retain In their paper files the 
most sensitive personal information they possess. 

Another widely held fear is that computerization 
makes it more difficult for the individual to know 



what is in the file about him, to have errors cor- 
rected, or have the data erased where public policy 
specifies that certain information about an in- 
dividual's past should be ignored. 

The Project's inspection of advanced systems 
showed that notice to the individual about a record's 
existence, opportunity to inspect and challenge that 
record, and policies as to the removal of out-of-date 
or irrelevant information were not being substantially 
altered by computerization. Where policies afford- 
ing individuals rights of due process such as the 
above had been provided in an organization prior to 
computerization, those rules are being followed in 
the new computerized systems as well. Where no 
such rights were given, the adoption of computers 
has not made the situation either worse or better. 
Neither has computerization introduced impersonal 
decision-making in systems where this was not pres- 
ent before, nor forced organizations into greater 
reliance on "the record" in making decisions about 
clients, customers or citizens. Where abuses along 
these lines were present in computerized systems — 
raising serious due process questions— they had 
been carried over from the high-volume "process- 
ing" of people in the manual era. 

Public Misunderstanding 

Over and over again, the Project's findings indi- 
cate profound public misunderstanding about the 
effect of computers on large scale record systems. 
To some extent, the inflated claims and proposals 
of organizational managers about the capacities of 
their computer systems helped to generate what 
were in fact baseless concerns for privacy on the 
part of the public. 

In addition, as the Report shows with respect to 
law enforcement uses and airline-reservations and 
charge-card systems, many commentators on com- 
puters and privacy issues have failed to do adequate 
research into the actual operations of systems about 
which they write, and have presented entirely in- 
correct pictures to the press and public about how 
these computer systems work. The danger in this, the 
report points out, is that we may jpve up the fight 
in the belief we have already lost: 
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If we assume that computer users are already 
doing things that they are not, we risk surrender- 
ing without a fight the border between properly 
limited and surveillance-oriented computer ap- 
plications. * , , The question of what border con- 
trol measures should be adopted can hardly be 
understood and properly considered , . . if the 
public and opinion leaders assume that the 
borders have already been obliterated. 

Efficiency 

Computerization in advanced organizations is 
producing changes in record-keeping methods that 
can increase the efficiency with which organiza- 
tions carry out their basic decision-making about 
the people they process or serve. Computerization 
is making it possible for many organizations to: 
maintain more up-to-date and complete records; 
obtain faster responses to inquiries about a given 
individual; and make more extensive use of infor- 
mation already in the files. Computers have also 
made possible dramatic expansion of networks for 
exchange of data among organizations that have 
shared data since pre-computer days; and the crea- 
tion of some large data bases of information about 
people that would not have been feasible without 
automation, These changes have been felt already 
In police information systems, national credit re- 
porting systems, charge card systems, and others, 

Data-Sharing 

Looking at technological trends for the remaining 
years of the 1970*s, the Report forecasts that while 
there will be important continued increases in com- 
puter capabilities, no developments are now fore- 
seeable that will alter the technological, organiza- 
tional, and socio-political considerations that pres- 
ently frame the databanks and civil liberties issue. 
Organizations will have more flexible, reliable, and 
cost-effective computer systems to use in pursuit of 
their policies, but these will not represent a radical 
departure from the computer capabilities presently 
available, The most important development with 
implications for civil liberties interests will be an 



increase in the ease with which data can be shared 
among organizations which have computers, 
coupled with a reduction In the cost of doing so. 
This will make it imperative that legal boundaries 
as to data-sharing are set as clearly as possible, 

Augmenting the Power of Organizations 

The Project concluded that the real issue of 
databanks and civil liberty facing the nation today 
is not that revolutionary new capacities for data 
surveillance have come into being as a result of 
computerization, The real issue is that computers 
arrived to augment the power of organizations just 
when the United States entered a period of funda- 
mental debate over social policies and organiza- 
tional practices, and when the traditional authority 
of government institutions and private organizations 
has become the object of wide-spread dissent, 

Challenge of Goals 

Important segments of the population have chal- 
lenged the goals of major organizations that use 
personal records to control the rights, benefits, and 
opportunities of Americans, There is also debate 
over the criteria that are used to make such judg- 
ments (religious, racial, political, cultural, sexual, 
educational, etc.)? and over the procedures by 
which the decisions are reached, especially those 
that involve secret proceedings and prevent in- 
dividuals from having access to their own records. 

Distrust of Organizational Record-Keeping 

Computers are making the record-keeping of 
many organizations more efficient precisely at the 
moment when trust in many large organizations is 
low and when major segements of the American 
population are calling for changes in values that 
underly various social programs, for new definitions 
of personal rights, and for organizational authori- 
ties to make their decision-making procedures more 
open to public scrutiny and to the review of specific 
individuals involved. 

Little Legislation 

Despite the rapid spread of computers, there has 
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been little so far by way of new legislation, judicial 
rulings, regulatory agency rules, or other legal 
remedies defining new rights to privacy and due 
process in major record systems. The Report stresses 
that, because of the increased efficiency of record- 
keeping and the growing intensity of the public's 
concern, the middle 1970's is the moment when 
law-makers and the public must comront both 
long-standing and newly-raised civil liberties issues! 
and evolve a new structure of law and policy to 
apply principles of privacy and due process to 
large-scale record-keeping. 

The Report identifies six areas of priority for 
public action, and presents examples of specific 
policy measures under each of these that ought to 
be seriously considered by policy makers. 

Right of Access and Challenge 

Development of laws to give the individual a 
right of access and challenge to almost every file 
in which records about him are kept by city, county, 
state, or government agencies: At stake here is the 
possibility that, denied access to records being used 
for decisions about himself, the citizen is left with 
"feelings of powerlessness and the conviction that 
government authority is fundamentally arbitrary," 

At the very least, citizens ought to know what 
record systems exist in government agencies, A 
Citizen's Guide to Files, published at every ap- 
propriate level of government jurisdiction, should 
"provide the citizen with a thorough, detailed and 
non-technical directory of the record systems that 
contain information about him, and the general 
rules under which it is being held and used." 
Providing adequatcd due process protection in 
government files, the Report suggests, is best 
achieved by assuming that any individual should 
be able to see and get a copy of any records used 
to affect him or her personally — -with the record- 
keeping agency "bearing the burden of proving that 
some specific public interest justifies denying 
access," 

Explicit Rules 

Develop of explicit laws or rules balancing con- 



fidentiality and data-sharing in many sensitive 
record systems that today do not have clearly de- 
fined rules: Among these would be rules governing 
the provision of information to law enforcement 
agencies from bank accounts^ travel and entertain- 
ment card records, airline and hotel reservation sys- 
tems, etc. The Report predicts that one or two large 
systems will come to dominate in each of these 
areas. 

This development will make the individual's 
account record more comprehensive and a very 
inviting target for investigators of all kinds, With 
that rise in sensitivity and attractivenes ought to 
go legislative enactments spelling out retention 
and destruction policies confidentiality rules, and 
procedures for protecting individual rights when 
outsiders seek to obtain access for what are 
asserted to be lawful and necessary purposes. 

As a case study in how not to build new record 
systems, the Report discusses some of the major 
Administration and Congressional proposals for 
national welfare reform, which generally hinge on 
the avallal "lity of computers for massive data 
storage and exchange. Several of the welfare sys- 
tem proposals contain "sweeping authorizations for 
data collection and sharing but almost nothing by 
way of confidentiality standards and due-process 
review procedures/' The Report points out that we 
may be "creating one of the largest, most sensitive, 
rnd highly computerized record systems in the 
nation's history, without explicit protections for 
the civil liberties of millions of persons whose lives 
will be profoundly affected , , 

Records of the Wrong Kind 

Limit the collection of personal information 
where a proper regard for the citizen's right to 
privacy suggests that records ought not to be main- 
tained at all by certain organizations, or never 
furnished for certain uses in the society: Among 
the examples are the use of arrest-only records in 
licensing and employment decisions, and the selling 
to commercial advertising services of names and 
addresses collected by government under its Hcens- 
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ing and regulator powers, unless the individual 
specifically consents to such use. 

In the case of arrest records, the Report stresses 
that: 

A democratic society should not allow arrest 
records to be collected and circulated nationwide 
with increasing efficiency without considering 
directly the actual social impact of their use in 
the employment and licensing spheres, and with- 
out examining the possibility that dissemination 
beyond law-enforcement agencies represents an 
official somatization of the citizen that ought 
to be either forbidden by law, or closely 
regulated. 

Social Policy 

Increased work by the computer industry and 
professionals within it on technological safeguards 
which will make it possible to implement confiden- 
tiality policies more effectively than is now feasible: 
The Report notes that: 

No *technolojpca! fix 1 can be applied to the data- 
bank problem. Protection of privacy is a matter 
of social policy, on which computer professionals 
are fellow-citizens, not experts, 

But the Project calls for more research, develop- 
ment and testing efforts to be undertaken by the 
computer industry to see that the computer's 
capacities for protection of confidentiality and in- 
surance of proper citizen access are turned into 
"available and workable products". Law and public 
pressure, the Report suggests, require that such 
measures be taken by managers of sensitive record 
systems when they are computerized, thereby stimu- 
lating the "user demand" to provide a practical 
market for such devices and techniques. 

No Extension of Use of Social Security Number 

Reconsideration by Congress and the executive 
branch of the current permissive policies toward 
use of the social security number in an increasing 
number of government and private record systems: 
The Report notes that having such a number is 
not a prerequisite for linking files within or between 



organizations, but notes that a common numbering 
system clearly makes record linkage easier and 
cheaper. Further, the Project concludes that re- 
solving the critical civil liberties issues in record 
keeping "will require that a minimum level of trust 
be maintained between American citizens and their 
government, Under these conditions, adopting the 
social security number as a national identifier or 
letting its use spread unchecked cannot help but 
contribute to public distrust of government," 

Information-Trust Agenda! 

Experimentation with special information-trust 
agencies to hold particularly sensitive bodies of 
personal data: For example, the Report suggests 
that the handling of both national crime statistics 
and summary criminal histories ("rap sheets") 
might be taken away from the Federal Bureau of 
Investigation and placed in an independent national 
agency under control of a board that would have 
public representatives as well as law enforcement 
officials on it Such an agency would have to be 
established **with a clear legislative mandate to be a 
'guardian* institution," paying attention to civil 
liberties interests as well as law enforcement needs* 

Critical Period, 1973*78 

The Report stressed that the next five years 
would be a critical period in the reception and con- 
trol of sensitive personal record systems, especially 
those managed by computers* More sensitive areas 
of record-keeping are being entered by many 
computerizing organizations; many larger on-line 
(instant access) networks are being brought into 
operation; and more consolidations of presently 
scattered records about individuals can be seen as 
a trend hi certain areas, such as criminal Justice, 
credit and financial transactions* and welfare. The 
Report stresses that unless lawmakers and organiza- 
tional managers develop proper safeguards for 
privacy and due process, and create mechanisms for 
public scrutiny and review, the record systems they 
are building could sharpen the already serious de- 
bate in American society over the way to apportion 
rights, benefits, and opportunities in a credential- 



oriented society, and leave organizational uses of 
records to control Individual features too far outside 
the mle of law, . 

In its dosing paragraphs, the Report sums up 
the databanks and civil liberties problem as 
follows: 

If our empirical findings showed anything, they 
iadicate that man is still in charge of the 
machines. What is collected, for what purposes, 
with whom information is shared, and what op- 
portunities individuals have to see and contest 
records are all matters of policy choice, not 
technological determinism, Man cannot escape 
his social or moral responsibilities by murmur- 
ing ferbly that "the Machine made me do it," 
There is also a powerful tendency to romanticize 
the pre-computer era as a time of robust privacy, 
respect for individuality in organizations, and 
M face-to-face' 1 relations in decision-making. Such 
arcadian notions delude us. In every age, limiting 
the arbitrary use of power* applying broad prin- 
ciples of civil liberty to the troubles and chal- 
lenges of that 'time, and using technology to 
advance the social well-being of the nation repre- 
sent terribly hard questions of public policy, and 
always will We do not help resolve our current 
dilemmas by thinking that earlier ages had magic 
answers. 

Computers are here to stay. So are large organi- 
zations and the need for data. So is the American 
commitment to civil liberty, Equally real are the 
social cleavages and cultural reassessments that 
mark our era, Our task Is to see that appropriate 
safeguards for the individual's rights to privacy, 
confidentiality, and due process are embedded in 
every major record system in the nation, particu- 
larly the computerizing systems that promise to 
be the setting for most important organizational 
uses of information affecting individuals in the 
coming decades. 
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Appendix IX JUVENILE INFORMATION SYSTEMS- 

A COMPARATIVE ANALYSIS * 

by Michael L Al t man 



In 1967, the President's Commission on Law 
Enforcement and Administration of Justice recom- 
mended that the Department of Justice and the 
States establish computer-based information sys= 
terns for the purpose of "having complete and 
timely information about crimes and offenders 
available at the right place and the right time ■ . , ss 1 
Influenced by this recommendation, lured by the 
millions of dollars provided by LEA A, 2 and assisted 
by a Model Act, Model Regulations and Technical 
Memoranda prepared by Project SEARCH* 3 a 
large number ot states and local jurisdictions have 
established automated criminal history systems, 4 
Information pertaining to juvenile record systems 
is limited, but a 1972 Department of Justice sur- 
vey 5 indicates that at least twenty-seven jurisdic- 
tions have introduced some form of automation 
into their juvenile courts. In addition, it is clear that 
many other juvenile courts are seriously con- 
templating adopting some form of automation into 
their record keeping practices. 

The automation of juvenile records has clearly 
lagged behind the automation of adult criminal 
records. The reasons for this lag are not entirely 
clear for the juvenile justice system, which is com- 
pelled to serve both welfare and punitive goals, 
collects, stores and purports to utilize far more 
information than the criminal justice system. The 
need to manage this vast quantity of information 
would seem to have compelled the juvenile justice 
system to lead the movement towards automation— 
but, it hasn't. Based upon conversations with 

* Reprinted from Computer Applications in the Juvenile Justice 
System, published by the National Council of Juvenile Court Judges. 

1 The Challenge of Crime In a Free Society, A Report by the 
President's Commission on Law Enforcement and Administration of 
Juttjc (1967) at p. 266. 

* Law Enforcement Assistance Administration created by Title I of 
the Omnibus Cruse Control and Safe Streets Art of 1968, 42 U,S,C. 
1701 (as amended by Public Law 9W3, August 6. 1973). 

* SEARCH is an acronym for System for Electronic Analysis and 
Retrieval of Criminal Histories. The Project is located in Sacra* 
memo, California, is fundi d by LEAA and has produced a number 
of memoranda pertaining to automated criminal history systems In* 
eluding a Model Art (Technical Memorandum No. 3, May, 1971) 
and Model Regulations (Technical Memorandum No, 4, March, 1972) , 

*Thm 1972 Directory of Automated Criminal Justice Information 
System, published by the United States Department of justice, 
reports that a survey of the SO states and 103 local Jurisdictions 
revealed 434 separate automated systems. 

•td. it&43, 34. 



officials in several states, this seeming anomaly is 
explained in several ways: 1) Project SEARCH 
specifically excluded juvenile records from its 
model act, 0 2) the fear that public opposition to 
automating juvenile records would jeopardize the 
movement toward automation of adult criminal re- 
cords, 3) the belief that automating juvenile records 
might make it more difficult to preserve the historic 
principle that juvenile records should be confiden- 
tial, 4) the belief computers don't forget and that a 
juvenile justice system exists* at least in part, so that 
we can both forgive and forget, 5) the belief of law 
enforcement presonnel that juveniles are different 
and that there is not as great a need for record in- 
formation pertaining to juveniles as there is for 
adults and 6) the belief that the important informa- 
tion pertaining to juvenile is not a summary of 
previous offenses but rather background, social, and 
psychological data which is much more difficult and 
costly to quantify and store in an automated system. 

These explanations are not entirely satisfactory 
because it is often asserted that computers can be 
programmed to preserve confidentiality (through 
the use of access codes, creating a log of those who 
seek information, etc) and can be programmed to 
forget. 7 In addition, the national practice of diver- 
sion on the police level 8 would seem to indicate that 
law enforcement personnel would need and want ac- 
curate information quickly in order to make a diver- 
sion decision as early as possible. Also, a substantial 
percentage (22,6 percent) of all police arrests for 
violent crime are persons who are under the age of 
18° and the reasons that law enforcement supports 
automated criminal histories pertaining to adults 

* Project SEARCH, Technical Memorandum No. 4, Reg, 4 at pp. 
8, 49 (March, 1972). 

7 The notion that the use of computers can limit rather than 
enhance risks to privacy is touted by computer salesmen and is 
accepted by Protect SEARCH. See, Security and Privacy Considera- 
tions in Criminal History Systems, Project SEARCH Technical Re- 
port No, 2 (July, 1970), The notion is disputed by Professor Miller, 
Miller, A.R., The Assault on Privacy 41-53 (1971), 

* Forty-nine and two*tenths percent of all juveniles taken into 
custody by the police in 1972 were not referred to juvenile court but 
were handled internally by the department or were referred to 
another agency. Crime in the United States: Uniform Crime Reports, 
Table 21, p. 116 (1972)* 

* Crime in the United States: Untfofm Crime Reports, Table 21, p, 
U6 
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would seem to apply at least to that class of juve- 
niles. Finally, all of the explanations offered relate 
to the automation of records pertaining to identi- 
fiable juveniles and do not relate to the juvenile 
justice system's need for quantitative data collected 
for administrative and evaluative purposes. 

Even if the explanations given for the reluctance 
to automate juvenile records are not totally ade- 
quate, there are a number of reasons that the 
emerging movement towards automation should 
proceed cautiousiy. First, although there may seem 
to be an internal lojpc dictating that we automate 
that information pertaining to juveniles which has 
been automated in the adult system, the fact Is that 
many of the basic premises of the adult criminal 
history system, as well as its operation, are ques- 
tionable. For example, the supposed prototype auto- 
mated criminal history system, the NCIC system, 
has produced substantial criticism 10 ranging across 
the political spectrum from the American Civil 
Liberties Union to Senator Barry Goldwater, Most 
recently, the Governor of Massachusetts announced 
that Massachusetts would not participate in the 
NCIC system, "until such time as the Department of 
Justice or the Congress provides sufficient guaran- 
tees to safeguard individual rights and the system*s 
integrity against abuse," 11 Since one of the basic 
principles of the juvenile justice system has been 
to preserve the confidentiality of a juvenile's con- 
tacts with the system in order to enhance the pos- 
sibility of rehabilitation and decrease the possibility 
of stigma, the juvenile justice system should certain- 
ly pause until it is somewhat clearer whether auto- 
mation will serve or disserve the interests of privacy 
and confidentiality, Stated another way, a major 
premise of the juvenile justice system is that chil- 
dren are different and that one of the ways that the 
system should recognize that difference is by givine 
children "another chance." One way in which a 
child is given another chance is by protecting his 
record so that he won't be treated as a "criminal" 



Westin, A.F M Data Banks in a Free Society, 47-64 (1972), 
« Letter from Governor French w, Sargent to Attorney General 
Elliot L, Richardson dated June 13, 1973, 



The importance of that value may require that we 
not automate juvenile records (notwithstanding 
some benefits produced by automation) because the 
risks would simply be too great that a basic premise 
of the system could be undermined, 13 

A second reason that juvenile courts should pro- 
ceed cautiously with respect to a decision to auto- 
mate its record systems is that the juvenile justice 
system, notwithstanding Gault, is premised upon a 
social-welfare model. That is s the system, as ex- 
pressed through its diversion, intake and disposition 
mechanisms, is primarily concerned with what the 
child is (or isn*t) and what he needs and not with 
what he did. 13 In order to find out what the child 
is and what he needs a detailed social history is pre- 
pared and this history may include psycholopcal 
testing and evaluation* This type of information, in- 
formation which in one sense distinguishes a juve- 
nile from an adult court, is most difficult to com- 
puterize because it is often subjective and intuitive, 
not readily quantifiable and s if quantified, it often 
becomes extremely misleading. The problem here 
has been aptly stated by a Canadian Commission: 

Computers are most efficient when dealing with 
information that can be quantified and system- 
ized; information that is intuitive, ambiguous, or 
emotional is much more difficult to computerize* 
As a consequence, computers may reinforce the 
importance in the decision-making process of the 
technocrat over the humanist, the objective over 
the subjective, 14 



The risk Of wholesale exposure of automated records Is dis- 
euased at great if fifth by Professor Arthur Mfflt r in Th* Assault on 
Privacy (1971), 

"The premise that juvenile court* focui on the eftfld and not what 
he did may be validated by looking at almost any juvenile file and 
acting that at most one page is devoted to Whit the ehfld did while 
many pages are devoted to his "social history." Moreover, I would 
guess that at most only two to Ave percent of all juveniles who have 
contact with the juvenile justice system ever re* an adjudication 
hearing iince most juveniles are either diverted prior to a hearing or 
plead guilty. 

»« Privacy and Computers, A Report of a Task Foree established 
by the Department of Communications/Department of Justice (In- 
formation Canada, 1972), The importance of intuition to a clinician 
has been written abcut extensively. See, Sarbin, T.R., Clinical 
Pmhoiogy^Art or Science?* 6 Psyehometrie 191 (1941). A full 
discussion of the debate about the clinical method appears in Meehl, 
P.B,» Clinical versus Statistical Prediction (1954), 
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The problem is demonstrated by the automated sys- 
tem in Worcester, Massachusetts in which the 
child's LQ, is reported as a raw aggregate score, 
the simplest way to quantify information about in- 
telligence, Aside from the question whether I.Q, 
scores should be utilized at all, reporting only the 
raw score raises a number of issues: it would ap- 
pear to violate Ethical Standards promulgated 
by the American Psychological Association (Prin- 
ciples 14) and it is necessarily misleading because 
the meaning of an I.Q. score can not be understood 
unless the specific I.Q. test utilized is reported, the 
score is interpreted, at least in terms of standard 
deviations, and the relationship between verbal and 
performance scores and other information that is 
available about the child is explained 15 so that 
I.Q, can be understood in its proper context 

A third reason that I am concerned about the 
emerging trend towards automating juvenile re= 
cords is that the records are often of poor quality, 
information is often collected and not used or if used 
It is questionable whether it should be used for that 
purpose. The recent observations of Edwin M. 
. Lemert bear repeating here: "Juvenile court re- 
cords 4 # t are inadequate or incomplete as reports; 
they are uneven in their description and analysis 
of various aspects of the minor's problem and situa- 
tion, . , Lemert also reports, "the existence of a 
vast amount of information in juvenile records, re- 
plete with numerous duplicates, which is seldom if 
ever used" and further that there is a "lack of dis- 
cernable correspondence between the contents of 
records and recommendations made for disposition 
of cases," 17 Therefore, "to grasp how decisions are 
made . . . , one must 'read between the lines* of 
records or solicit informal explanations from parties 
involved," 18 

If Lemerfs conclusions about juvenile records 



^See* McCarthy, D., Ethical and Professions! Considerations in 
Report ing of Test Information 2WI in Harnett, W.L.i Readings in 
Psychologies! Tests and Measurement* (1964), See aUo f Anastasi, 
jK if Psychology f Psychologists, and Psychological Testing, 22 Amer. 
Psychol. 297-306 (1967). 

"Lemert, ILM** Records in the Juvenile Court in On Record: 
Files and Dossiers in American Life, 335 (1969), 

»* Id, at 357, 

» Id. at m. 



are accurate, and I can add that my observations of 
records in Massachusetts, Arizona and Nevada con- 
firm his statements, then a discussion of computer- 
izing juvenile records, other than for routine ad- 
ministrative purposes, can not be meaningful. 
Ratherj the first step must be to analyze the in- 
formational needs of the juvenile justice system and 
the ability of the system to collect and use that in- 
formation, Once such an analysis is undertaken we 
can then talk about the best form of storing that in- 
formation and ask whether automation serves or 
disserves the information needs of the juvenile 
courts. 

The fourth reason that I would suggest we pause 
before putting the juvenile justice system on the 
"computer bankwagon 1 ' is that first there must be a 
thorough examination of th§ laws and policies per- 
taining to the confidentiality of juvenile records. 
The need for such an examination befdre, rather 
than after computers are utilized in the juvenile 
courts, becomes evident from comparing the various 
state laws that now exist and from analyzing recent 
court decisions, The analysis that follows proceeds 
from the assumption that confidentiality is a desir- 
able goal of the juvenile justice system, 10 

Analysis Of State Legislation 

Virtually every state has enacted legislation to 
limit public access to juvenile court records and to 
declare that an adjudication of delinquency is not 
a conviction of a crime. The purpose of such legisla- 
tion is to enhance the chances of rehabilitation by 
reducing the risks of collateral disabilities attaching 
to the disclosure of a conviction, This is a lofty pur- 
pose but, as many studies have Indicated^ 0 it hasn't 



19 The principle that juvenile records should generally be kept 
confidential is baled upon the notion thit a record Is "organized 
stigma" and that the juvenile justice system, to accomplish Its Social 
welfare and rehabilitative goals. must affirmatively seek to prevent or 
reduce stigma from attaching or at least from being communicated, 
See f Lemert, supra note 16 at pp. 373-75; Schur, Radical Non- 
intervention 11S-30 (1973); Schwarti and Skolnlck, Two Studies of 
Legal Stigma* 10 Social problems U3 (1968), 

s E.g., Miller, H,S.» The Closed Door (1972) ; Sparer, E,, 
Employability and the Juvenile Anest Record (1966). 
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worked." 1 It hasn't worked because many employers 
and educators believe that they are taking risks 
when they employ or enroll a person with a record; 
because many employers and educators are un- 
willing to expend funds to conduct a complete in- 
vestigation to determine whether the existence of a 
record actually reflects upon the person's present 
qualifications or trustworthiness, and because there 
are many loopholes and inadequacies in the laws 
which seek to preserve confidentiality and eliminate 
collateral disabilities. 

The inadequacy of present laws pertaining to in- 
formation systems in the juvenile justice system Is 
indicated by an examination of the present state 
laws. Perhaps the most telling revelation from such 
an examination is that generally there is no formal 
regulation, either by statute or rule, in a number of 
significant areas. First, there are no laws defining 
the purposes for which information may legitimately 
be collected and utilized* Instead, it becomes ap- 
parent that the juvenile justice system assumes that 
so long as a court has jurisdiction, it may collect any 
and all information (no matter how private), and it 
may use that information for any purpose, subject 
of course to the court's own internal and subjective 
notions of relevancy, utility and the best allocations 
of resources. 22 

Second, there are no laws establishing any quality 
controls with regard to practices of collecting and 
using information, Thus, juvenile courts are not 
compelled to be introspective about their informa- 
tion-gathering practices, In other words, juvenile 
courts are never required to ask themselves (never 
mind prove) why, In a robbery case, for example, 
there is or is not a justification for expending re- 
sources to collect information regarding the child's 
performance in school or the degree to which his 
family is functional or dysfunctional. Then, as- 



^See also, Justice Farias* statement in In Re Gault. 387 U,5 5 I, 
24-25 (1967), to the effect that many police departments regularly 
supply record information to the Armed Services, social service 
agencies, and employers, 

s The assumption that businesses want, need and can use more 
information if challenged by Ackoff, R.L., in an article entitled 
^Management Misinformation Systems, 14 Management Science B-147 

(mi). 



suming there is a justification for collecting such in- 
formation, the courts are not required to ask them- 
selves how that information is relevant to a parti- 
cular decision, Instead, the courts are permitted to 
assume that a poor school record on a dysfunctional 
family is evidence of delinquency proneness — jus- 
tifying intervention, But, does evidence of a poor 
school record or a dysfunctional family in fact war- 
rant intervention? The answer is that we don't 
know. As Gottfredson has stated: "Despite the 
painstaking studies, item analyses and validation 
studies . . . , all currently available prediction me- 
thods still have only relatively low predictive 
power,' 423 Thus, to rely upon any particular datum 
or combination of data to make a judgment of 
delinquency proneness will necessarily result in 
gross overpredictions, The question whether, or the 
extent to which, the juvenile justice system should 
be permitted to overpredict raises policy questions 
on one level. The policy question on the level of in- 
formation systems is to what extent should the 
juvenile courts be allowed to collect and store in- 
formation, particularly information of a private 
nature, which has a relatively low predictive power, 
Third, there are no laws which presently recog- 
nize that a juvenile court's thirst for information 
should be weighed against a juvenile's right and 
need for privacy, This means that the juvenile 
justice system assumes that once it obtains jurisdic- 
tion over a child it may collect any and all informa- 
tion, no matter how "private" that information may 
be, no matter whether that Information is only 
marginally relevant to a particular decision, and no 
matter how limited the scope of that decision may 
be. In addition, there is no concept of proportion- 
ality with respect to information gathering, By that 
I mean that the system assumes that it may gather 
any and all information ~ no matter how "private" 
— irrespective of whether the child is charged with 
a curfew violation or murder. In other words, the 
juvenile justice system does not start from the 

m Gottfredson, D,M 5 » Assessment and Prediction Methods in 
Crime and Delinquency In The President f a Commission on Law En* 
fofCiment and Administration of Justice, Task Force Report; 
Juvenile Delinquency and Youth Crime 171, 181 (1967), See also, 
Schur, E.M., Radical Nonintervention 46-51 (1973), 
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premise, as I would suggest it should, that a child 
has a right of privacy and that the justification for 
invading that privacy — the state's interest in in- 
truding — should depend both upon the seriousness 
of his misconduct and the validity of collecting the 
information for a particular decision* 04 

A fourth and final area which I will mention, in 
which there are presently no state laws, are laws 
regulating the use of computers in the juvenile 
courts. The general need for such laws is the sub- 
ject of Arthur Miller's book. The Assault on PrU 
vacy, and it is a subject to which Project SEARCH 
has given some attention. Certainly, juvenile courts 
must address the many legal questions which arise. 
The most obvious questions relate to the application 
of theft laws to situations in which a person obtains 
information from a computer witb uthority, the 
effect of computer use upon senile's right of 
privacy and the special needs of children to be pro- 
tected against the misuse of information. For pur- 
poses of this paper and this symposium, however, I 
only want to emphasize that computers, in one 
sense, simply provide a mechanism for storing, or- 
dering and disseminating information, and meaning- 
ful analysis of that mechanism or any mechanism 
can only be considered in the broader context of 
the purposes of collecting and using information in 
the juvenile justice system, 

Now that I have outlined what subjects, pertain- 
ing to juvenile information systems, are not the sub- 
ject of formal regulation, I now turn to those issues 
which have been attended to by the legislatures of 
soma states. 

Only 24 states (Alaska, Connecticut, Georgia, 
Hawaii, Idaho, Illinois, Indiana, Kentucky, Kansas, 
Maryland, Minnesota, Missouri, New Mexico, North 

** Two recent eases suggest the concept of proportionality although 
neither Case arises in the juvenile court context. In Meniken v* 
Ctessman, 42 U.3.L* Wk. 2203 (Oen, Law, October 16, 1973) the 
court held that information could not be collected for a school's 
drug prevention program because the information sought was Of a 
private nature and was not shown to be sufficiently relevant to the 
purposes for which it would be used. See abo Wtntworth v, Schle- 
stnger, 42 USA. Wk, 2271 (Gen, Law, November 27, 1973), 



Dakota, New York, Oklahoma, Oregon, South 
Carolina, South Dakota, Tennessee, Utah, Vermont, 
Wisconsin ar*d Wyoming) control and limit access 
to juvenile records in the possession of police, 
Therefore, the decision whether to disseminate juve- 
nile records in the remaining 26 states is left to the 
discretion of each police department in each state. 
The laws in those states that have enacted legislation 
pertaining to police \- venile records are sometimes 
very general, as in oming (§14-1 5.41 ), where 
it is provided that police records on juveniles must 
be kept separate from those of adults and that such 
records are confidential but may be disseminated 
with the consent of a judge. In Vermont (§ 663), 
however, the legislation is somewhat more specific 
and inspection Is limited to specific agencies: the 
juvenile court, an agency to which a juvenile is com- 
mitted, corrections, a criminal court for sentencing, 
the parole board and to other police agencies* The 
Iowa Code (§ 232,56), an anomaly, requires police 
to keep their juvenile records open to the public. m 
Only 23 states (Connecticut, Florida, Georgia, 
Hawaii, Idaho, Indiana, Illinois, Kansas, Kentucky, 
Minnesota, Missouri, New Jersey, North Dakota, 
Ohio, Oklahoma, Oregon, South Carolina, Ten- 
nessee, Utah, Vermont, Virjpnia, Washington and 
Wyoming) regulate the fingerprinting and photo- 
graphing of juveniles. Illinois (ch. 373 § 702-8) 
prohibits police from forwarding juvenile prints and 
photos to the RB.I. and to the central state deppsi- 
tory; South Carolina (ch. 15-1281-20) prohibits the 
fingerprinting and photographing of juveniles with- 
out judicial consent; and Florida (ch, 39.03) limits 
fingerprinting and photographing to felony cases, 
limits access to police, the juvenile court and the 
juvenile, and requires destruction of such records 
at age 21, 

Only 16 states (Alaska, Arizona, California, 
Colorado, Connecticut, Florida, Georgia, Indiana, 
Missouri, New Jersey, Oklahoma, Oregon, Ten- 
nessee, Utah, Virginia and Washington) have laws 



m Query whither an employer in Iowa would have the right to 
have access to the police computer to secure printouts of all 
juveniles with an arrest record. 
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providing for juvenile records to be destroyed* 26 
The Connecticut statute, (§ 17-72a), authorizing 
destruction of records, requires the immediate 
"erasure" of all police and court records if the 
child is found not delinquent and the "removal" of 
**all references" to the case if the child was found 
delinquent and is not charged with a subsequent 
offense for two years thereafter, California* in addi- 
tion to a statute authoring the sealing of records 
(Welf. and Instit. Code § 781), ^ves each juvenile 
court the power to destroy records other than the 
docket and minute book, (Welf, and Inst, Code § 
826), Missouri law (title 12 § 211.32) on this 
point is similar to California, while New Jersey 
excludes from its "expungement" statute certain 
designated serious crimes. 

Six states (Alaska* Colorado, Maine, New 
Mexico, South Carolina, and Vermont) and the 
District of Columbia make it a crime to improperly 
disclose juvenile record information; but it is not a 
crime in the other states to disclose juvenile records 
to unauthorized persons. The District of Columbia 
Code (i 11-1586) makes it a crime to disclose, 
use or receive juvenile record information with- 
out authority; the Alaska criminal statute (ch, 
47,10,090) is limited to unauthorized disclosure 
by the news media; and the Maine code (oh, 15 § 
2609) makes it criminal contempt to divulge 
matters before the juvenile court. 

Nine states (Connecticut, California, Kentucky, 
New Mexico* Ohio, Oregon, Utah, Vermont and 
Wyoming) provide that once a juvenile record is 
sealed, the proceedings "shall be deemed never 
to have occurred;" die ether states have no similar 
provision. The practical effect of such a provision 
is to authorize a juvenile to answer an employer, 



s* Eleven states (California, Kentucky. Marylsnd, Msiiiehuaetts, 
New Mexico, North Dakota, Ohio* South Dakota, Utah* Vermont 
and Wyoming) have laws providing that, under certain circum- 
stances. Juvenile record* may be sealed* Since the functional effect 
of sealing records js to dose them to the public and juvenile court 
records aft theoretically closed anyway, teatmi statutes five a 
Juvenile little added protection. If* howevtfp police records are sealed 
with the court records, the effect of seaUaj may be beneficial to a 
juvenile. But Roion and Loughery, Staling and Exptmgtmtnt o/ 
Criminal Reeordj—Th* Big Lie, 61 J. of Crim. L, and Police Science 
378 (1970) in which the authors refer to sealinj and expungement 
statutes as a hoax. 



credit company s etc, that he has no record. See, 
e.g., CaL Welf, emd Inst* Code § 78L By contrast, 
a juvenile in another state, even if his record is 
sealed, does not have the legal right to deny the 
existence of a juvenile record (although die Court 
or Probation Office may have the authority to do 
so) and he would in fact be required to disclose 
the existence of a record in an application for public 
employment which had to be slpied under the 
penalties of perjury. Even if local law provides that 
the public employer may not deny the applicant a 
job merely because he has a juvenile record (e,g M 
Mass, Gen, Laws eh, 1 19 § 60) it has been held 
that the employer may refuse the job based, not 
upon the record itself, but the underlying facts of 
the case. See, Cacchiola v. Haberman, 31 N,Y,2d 
287, 291 NJ3.2d"117 0972) (conewing opin- 
ion). But see, TNG v, Superior Court, 94 Cal, 
Rptr, 813, 484 P,2d 981 (1971), Thus, it can be 
seen that the failure to authorize a juvenile to deny 
the existence of record, and the failure to prohibit 
an employer from asking about a record, establishes 
a loophole and an opportunity to deny benefits to 
juveniles^ 7 

Only seven states (Florida, Georgia, Hawaii, 
Idaho, New Mexico, South Dakota and Utah) have 
laws which specifically regulate access to juvenile 
records by researchers, A typical provision with 
respect to research access, Georgia Code § 
24A-3501, limits research to "authorized repre- 
sentatives of recognized organizations compiling 
statistics for proper purposes" and requires judicial 
approval. In Utah (| 55-10-116), the law merely 
states that a judge M may" provide access to "per- 
sons conducting pertinent research studies' 9 and by 
implication prohibits researchers from having 
access to probation records. Compare, North 
Dakota Code § 27-20=5! which does not specifically 
refer to access by researchers but does permit the 
court to "disclose'* records to named persons, in- 

m St is perhaps logical to assume that state* which nave fully 
accepted the philosophy of confidentiality would prohibit employers, 
credit companies, etc. from inquiring about either the existence of 
a juvenile record or the underlying facts of a juvenile offense. 
Whether that would be a good phfiosophy in all casta 2s subject to 
debate, dough* Hie Expungement of Adjudication Records, lf€6 
Wash, VX.Q. 147, 17W6* 
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eluding "any other persop having a legitimate in- 
terest , . . in the work of the court;" presumably 
this provision is designed to govern research access. 

Only six states (Alaska, Colorado, Georgia, 
Maine, Montana and South Carolina) have laws 
which prohibit the news media from publishing the 
names or photo of a juvenile, In Montana, the 
limitations on publication apply only to nonfelony 
charges (eh. 10-633). In Mississippi a contrary 
policy exists: the name of the juvenile and the 
names of his parents must be published in a local 
newspaper if the juvenile is a second offender, 

Only 11 states (Alaska, Connecticut, Florida, 
Georjpa, Idaho, Hawaii, Iowa, Kentucky, Louisiana, 
Oregon and South Carolina) have statutes which 
provide that information contained in juvenile 
records is privileged. In Alaska (§ 47, 10,090), the 
Code expressly states that the information is 
"privileged" while in states such as Connecticut 
(§ 571-84) a privilege is created by implication: 
"no information . . . shall be disclosed directly or 
indirectly." Some other states, such as Massachu- 
setts, have laws making record information inad- 
missible as evidence In court (eh. 119 § 60; eh. 
120 § 21), The practical distinction between 
privilege and evidentiary laws is that the evidentiary 
rule usually applies only to "courts" and thus, a 
probation officer could theoretically be compelled to 
testify before an administrative agency or any other 
non-court investigative agency. 

Finally, a number of states provide that a juvenile 
or his attorney have a right of access to the juve- 
nile's probation report (Colorado, Minnesota, New 
Mexico, Oregon, South Carolina, Tennessee, Wash- 
ington, Wyoming, Connecticut, Georfpa, and North 
Dakota). Although it appears to be nearly a uni- 
versal practice 28 to allow the attorney for a juvenile 
to inspect a probation officer's records, most states 
do not have laws which compel that result and, 
therefore, the privilege of access may be denied if 

** A 1963 survey reported that two-thirds of the judges ittffeyei 
regularly supplied probation reports to Ihe attorney* and only five 
percent never did so, Sfcoler, D.L. and Tenaey, C.W, ( Atwmty 
Representation in Juvenile Court, 4 Journal of Family Law 77* 
16-8? (1964), Both the Uniform Juvenile Court Aet and the Legisla- 
tive Guidelines of the Children's Bureau include rules which would 
accord attorneys access to all juvenile records. 



the juvenile'! attorney and the probation office are 
not on good terms, 

To summarize, most states have laws which 
serve as a general declaration that persons should 
not he denied opportunities based upon a juvenile 
record. But, most states do not have laws which 
are specific enough to assure that the general legisla- 
tive purpose is likely to become a reality* However, 
an examination of the laws of all the states reveals 
many provisions which may serve as a basis for the 
kinds of regulation which is needed. These are laws: 

1. Regulating dissemination of police records; 

2. Regulating fingerprinting of photographing; 

3. Permitting or requiring the destruction of 
records; 

4. Requiring the sealing of records; 

5. Making it a crime to disclose juvenile records; 
6* Providing that a juvenile proceeding is "deemed 

not to have occurred" once the record is 
sealed; 2& 

7, Regulating access by researchers; 

8, Regulating access by the media; 

9, Creating a privilege with respect to juvenile 
record information; 

10, Giving juveniles or their attorneys access to 
probation records. 

The enactment of legislation in all of the above 
areas does not, of course, exhaust all of the pos- 
sibilities for protecting information pertaining to 
juveniles. Enactment of such legislation would, 
however, provide a much firmer foundation to pro- 
tect juvenile records and if combined with legisla- 
tion focusing upon standards for collecting infor- 
mation, referred to earlier in this section, the risk 
of misuse of information would be substantially 
reduced. 

Analysis of Relevant Case Law 
Historically, the decision to collect, retain and 

* It haa been argued thai it is hypocritical and perhaps mcon- 
sisteRf with the philosophy of the juvenile courts to permit, either 
by legislative enactment or by court rule* a juvenile to Ue by 
denying that he haa ever had a record when in fact % record has 
exllfid. This argument was made and rejected In T.N^, v. Superior 
Court, 4 CaL 3d 76? (1971), 
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elease record information has been regarded as 
inclusively within the discretion of each criminal 
ustice agency, 80 A number of recent cases indi- 
ates, however, that the judiciary is now willing to 
promulgate standards pertaining to the practice of 
naintaining arrest records in certain cases. For the 
nost part, those decisions have focused upon 
musual facts, 81 However, other cases have broadly 
xamined both the law enforcement need to retain 
irrest records and the harm caused by dissemina- 
ion and have concluded that at least in cases where 
here has been an acquittal and there has been no 
iffirmative showing of the need to retain the record, 
xpungement will be required^ The legal premise 
if these cases has been either that the retention of 
in arrest record without proof of a compelling state 
lurpose to support retention is an invasion of the 
onstitutional right of privacy 38 or that expunge- 
nent may be an appropriate remedy to redress a 
onstitutionally unlawful arrest. 84 

The recent cases in which courts have broadly 
onstrued the right of expungement do not neees- 
arily mean, however, that courts will be willing to 
arefully scrutinize the legitimacy of a law enforce- 
lent purpose that is asserted in support of the 
elease of a record, For example, in the recent case 
f Tosh v. Buddies Supermarkets^ the police re- 
msed the conviction records and "mug shots" of 
nion organizers to a supermarket that was in the 
rocess of resisting a campaign to unionize its em- 
loyees. The union organizers sought an injunction 
nd damages when the supermarket published the 
rap sheets*' on 14X20 inch posters. The court 
enied the claim finding a "legitimate need" for 

"E.g., Fernicola v. Kennan, 39 AM 851 (N.J, Chili* 1944). 
ti See, Hughes v. Rizzo. 282F. Supp- 811 (B.D. Penn. 1968) (police 
nducied clearly Illegal mass arrests to dear park Of hlppfes^arrest 
cords Ordered expunged); Sullivan v. Murphy, 41 U.S.L.Wk, 2598 
ien* 5/15/73) (mass arrests without probable cause during Mav 
& demonstration=-arrest records ordered expunged) i Bttick v. 
udtty; — F, Supp, — (S.D.N.Y. Ho, 67 £iv, 3317, 3/30/73) (mass 
rest without probable cause to break up political rally— court 
cords ordered expunged). 

ilff, Eddy v, M&ere, 5 Wash, App, 334, 487 F.2d 211 (1971); 
ividson v. Dill, —Colo—, 503 P.2d 157 (1972), See also, Menard 
Mitchell, 430 F.2d 4S6 (D.C. CIr. 1970). 
m Eddy v, Moore, supra, 
"Menard v, Mitchell, supra at 491, 
"482 F.2d 329 (5th CIr. 1973). 



the release because the supermarket could be 
"better prepared to deal with" conduct which might 
be threatening to customers or store employees. 

Although the cases that are discussed above in- 
volve adult criminal records and not juvenile 
records, it is reasonable to conclude that most 
courts would apply similar reasoning to a case 
involving a juvenile. Indeed, courts have held that 
expungement of juvenile records may be ordered in 
cases where there has been an acquittal relying 
upon the broad policies of confidentiality and re- 
habilitation expressed in a state's Juvenile Court 
Aet ss 

One very recent case, Merriken v, Cressmon? 7 
substantially extends the right of juveniles to be 
protected from stigmatizing labels. In that case^ the 
court found that a program established by a school 
district to identify potential drug abusers in the 
eighth grade violated the children's constitutional 
right of privacy in that the information collected 
was of a private nature and not shown to have any 
necessary use for drug abuse prevention, there 
were not adequate protections to assure the con- 
fidentiality of the information, and the riste of 
harm from mislabeling or misuse were regarded as 
too significant to permit collection and retention of 
the Information, 

Jn summary s although courts are just beginning 
to analyze the right of criminal justice agencies to 
retain juvenile records, it is likely that the courts 
will at least adopt the following principles generally: 

1 . All records must be expunged if a juvenile has 
been arrested without probable cause and the 
charges are subsequently dismissed, 

2, All records must be expunged if a juvenile's case 
is dismissed or there is a finding of not guilty 



»Se£; In Re Smith. 63 Miac, 2d 198 (1970); Henry v. Looney, 65 
Mise, 2d 759 (1971)! Coffee, Privacy versus Parens Patriae, 17 
Cornell L, Rev, 571 (1972) I Cough, The l^ungement of AdJudJca* 
tion Records, 1966 Wash. U.L.A* 14?* B«t §§£, Dtigon v. Fotite 
Dept. City of Camden, 112 NJ. Super, 4§2 P 271 A,2d 727 (1970) 
lit which the court rejected a challenge of the general right of police 
to retain juvenile arrest records on the grounds that inch police 
records were not open to the public and their retention Is Justified 
to permit police to perforin necessary investigative and preventive 
activities, 

•T42 U,S,t, Wk, 2203 (Oen. Law, October 16, 1973), 
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unless it can be shown thai the records are not 
disseminated and that their retention is neces- 
sary for some valid law enforcement purpose, 
3* All records must include the disposition of the 
case. 

Interestingly, only Connecticut presently has a 
statute which compels compliance with the first two 
principles and no states have a law to assure com- 
pliance with the third. 

Conclusion 

Before a juvenile court begins to plan to intro- 
duce automation into its record keeping practices, 
for other than routine administrative matters (such 
as collecting aggregate data, docket control or pro- 
viding information about community placements 
and programs), it is necessary to first examine the 
juvenile court's informational needs, how it collects 
and uses information, how information can stigma- 
tize* children in unintended ways, the laws pertain- 
ing to the confidentiality of juvenile records and 



the special problems related to reducing clinical 
information to a format from which it may be 
converted into an automated system. Once such an 
analysis is completed, It is very likely that the con- 
clusion will be that much of the information that is 
presently collected by juvenile courts is irrelevant 
or is not used and the most pertinent information 
cannot be reduced to a computer format and re- 
tain its meaning. In addition, while present laws 
pertaining to the confidentiality of information are 
inadequate, and appropriate amendments can be 
made to substantially reduce the risk of improper 
disclosure and misuse of information, the best 
protection against stigmatizing children, if that is 
to continue to be a primary goal of the system, is 
not to collect information for purposes of creating 
a record unless it is absolutely needed for purposes 
which are evident. In any case, it is hoped that 
we will not spend millions of dollars on hardware 
and software, instead of spending it on services for 
children, without at least asking ourselves why we 
want the information in the first place and once we 
get it how we should and can use it* 
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STATE OF WASHINGTON 
44TH REGULAR SESSION 

Senate Joint Resolution No. 123 

by Senators Goltz, Fleming, SufHngton, 
McDermott and Morrison 

Read first time February 20, 1971! and referred to JUDICIARY COMMTTTEE, 

Be it resolved, sy the Senate and House of Representatives of the State 
of Washington, in Legislative session assembled* 

That, At the next general election to be held In this state there shall be submitted 
to the qualified voters of the state for their approval and ratification, 
or rejection, an amendment to Article I of the Constitution of the state of 
Washington by amending section 7 thereof to read as follows* 

Article I, section 7. No person shall be disturbed in his private affairs, or Ids 
home invaded, without authority of law. The right of privacy b hereby declared to 
be a fundamental right of the people. 

Be it further resolved, That the secretary of state shall cause notice of 
the foregoing constitutional amendment to be published at least four times during 
the four weeks next preceding the election in every legal newspaper in the state, 
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STATE OF NEW YORK 

1979-1976 Regular Sessions 
In Assembly 
January 8, 1975 



Introduced by Mr, C17LHANE — Multi-sponsored by— Messrs* 5IRELZIN, 
BiFALCO, BREWER, GRIFFITH, MONTANO, FERRIS, GRABER,HAREN- 
BERG, STOTT, LEVY, D^AMATO, BELLI BO VI, MOLINARI, OWEIL, 
SULLIVAN, DEARIE, WALSH, SERRANO — raid once and referred to the 
Committee on t Commerce, Indnstry and Economic Development— reference 
changed to Committee on Consumer Affairs and Protection— committee dis- 
charged, bin amended, ordered reprinted as amended and recommitted to said 
committ ee r eported from said committee with amendments, ordered reprinted as 
amended and placed on the order of second reading— passed by Assembly and 
delivered to the Senate— recalled from Senate, vote reconsidered, biU amended, 
ordered reprinted and restored to third reading. 

AN ACT 

to amend the general business taw, in relation to consumer credit 

reporting 

The People of the State of New York, represented in Senate and Assembly f do 
enact as follows: 

Section 1. The legislature hereby finds and declares: 

( 1 ) The banking system is dependent upon fair and accurate credit reporting. 
Inaccurate credit reports directly impair the efficiency of the banking system, and 
unfair credit reporting methods undermine the public confidence which is essential 
to the continued functioning of the banking system, 

(2) An elaborate mechanism has been developed for investigating and evaluating 
the credit worthiness, credit standing, credit capacity, character, and general repu- 
tation of consumers, 

(3) Consumer reporting agencies have assumed a vital role in assembling and 
evaluating consumer credit and other information on consumers, 
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(4) There is a need to insure that consumer reporting agencies exercise their 
grave responsibilities with fairness, impartiality, and a respect for the consumer's 
right to privacy* 

(5) It is the purpose of this article to require that consumer reporting agencies 
adopt reasonable procedures for meeting the needs of commerce for consumer 
credit, personnel, insurance, and other information in a manner which is fair and 
equitable to the consumer, with regard to the confidentiality, accuracy, relevancy, 
and proper utilization of such information in accordance with the requirements 
of this article, 

In furtherance of these findings the legislature does enact this article, 
§ 2. The general business law is hereby amended by inserting therein a new 
article, to be article twenty-five-A, to read as follows: 



ARTICLE 2S*A 
Fair Credit Reporting Act 



Section 380, Short title. 

380-3* Definitions 

5S0~b. Permissible dissemination of reports, 

380-c, Preparation and/or procurement of consumer reports. 

38(MI, Preparation and/or procurement of investigative consumer reports, 

380^e # Disclosures to consumers, 

38CM. Methods and conditions of disclosure to consumers* 

380-g, Procedure for correcting Inaccurate, irrelevant and misleading Information* 

38(Mi« Public record Information for employment purposes, 

380-t Restrictions on investigative consumer reports, 

380-j, Requirements on users of consumer reports, 

3l<Mc* Prohibited information accuracy, relevancy and obsolescence of Information 
in reports, 

38CM, Civil liability for willful non-compliance, 

380^-m, Civil liability for negligent noncompliance, 

380-n, Jurisdiction of courts; limitation of actions, 

380*o. Obtaining Information under false pretenses, 

380-p„ Unauthorized disclosures by officers or employees, 

Merchant harassment, 

380-r. Severability. 

§ 380, Short title. This article may be cited as the fair credit reporting act, 

§ 380-a. Definitions, (a) The term "person" means any individual, partnership, 

corporation, trust, estate, cooperative, association, government or governmental 

subdivision or agency, or other entity, 

(b) The term "consumer" means an individual 

(c) The term "consumer report" means any written, oral, or other communica- 
tion of any information by a consumer reporting agency bearing on a consumer's 
credit worthiness, credit standing, credit capacity, character, general reputation, 
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personal characteristics, or mode of living which is used or expiated to be used or 
collected in whole or in part for the purpose of serving as a factor in establishing 
die consumer's eligibility for (1) credit or insurance to be used primarily for per- 
sonal, family, or household purposes, or (2) employment purposes. The term 
does not include (i) any report containing information solely as to transactions 
or experiences between the consumer and the person making the report or (ii) 
any authorization or approval of a specific extension of credit directly or indirectly 
by the issuer of a credit card or similar device, 

(d) The term "investigative consumer report" means a consumer report or 
portion thereof in which information on a consumer's character, general reputa- 
tion, personal characteristics, or mode of living is obtained through personal 
interviews with neighbors, friends, or associates of the consumer reported on or 
with others with whom he is acquainted or who may have knowledge concerning 
any such items of information. However, such information shall not include specific 
factual information on a consumer's credit record obtained directly from a creditor 
of the consumer or from a consumer reporting agency when such information was 
obtained directly from a creditor of the consumer or from the consumer, 

(e) The term "consumer reporting agency" means any person which, for mone- 
tary fees, dues, or on a cooperative nonprofit basis, regularly engages in whole or 
in part in the practice of assembling or evaluating consumer credit information 
or other information on consumers for the purpose of furnishing consumer reports 
or investigative consumer reports to third parties, 

(f) The term "file" when used in connection with information on any con- 
sumer, means all of the information on that consumer recorded and retained by 
a consumer reporting agency regardless of how the information is stored. 

(g) The term "employment purposes" when used in connection with a con- 
sumer report means a report used for the purpose of evaluating a consumer for 
employment, promotion, reassignment or retention as an employee, 

(h) The term "merchant" means any person who receives a consumer report 
or investigative consumer report from a consumer reporting agency or who provides 
information to a consumer reporting agency pursuant to a contract or for a fee, or 
who otherwise regularly provides information to a consumer reporting agency, 

(i) The term "adverse information" means information that is likely to have 
a negative effect upon the ability or eligibility of a consumer to obtain credit, 
credit insurance, employment, or other benefits, goods or services, 

(j) The term "user" when discussed in connection with the use of a consumer 
report means any recipient of a consumer report or an investigative consumer 
report other than the subject thereof, 

§ 380-b. Permissible dissemination of reports. A consumer reporting agency 
may furnish a consumer report under the following circumstances and no other: 

(a) In response to the order of a court having jurisdiction to issue such an 
order, 

(b) In accordance with the written instructions and authorization of the con- 
sumer to whom it relates. 
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§ 380-e* Preparation and/or procurement of consumer reports, (a) A person 
may not procure or cause to be prepared a consumer report on any consumer 
unless such person has provided the consumer with clear and conspicuous written 
notice of the requested procurement or preparation and the consumer has, in turn, 
given a specific, dated, and separately signed written authorization for each' prepa- 
ration or procurement, 

(b) The notice to the consumer, which is required by the preceding subdivision: 
(1) must inform the consumer of the names, addresses, and telephone numbers of 
any and all consumer reporting agencies that will be requested to prepare or 
disseminate consumer reports about the particular consumer, and (2) must clearly 
and conspicuously inform the consumer that he may request and receive from all 
such consumer reporting agencies copies of any and all such consumer reports, 

§ 380-d. Preparation and/or procurement of investigative consumer reports, 
(a) A person may not procure or cause to be prepared an investigative consumer 
report on any consumer unless such person has provided the consumer with clear 
and conspicuous written notice of the requested procurement or preparation and 
the consumer has, in turn, given a' specific, dated, and separately stpied written 
authorization for each preparation or procurement 

(b) The notice to the consumer, which is required by the preceding subdivision: 
(1) must inform the consumer of the names, addresses, and telephone numbers of 
any and all eousumer reporting agencies that will be requested to prepare or dis- 
seminate consumer reports about the particular consumer; (2) must clearly and 
conspicuously inform the consumer that he may request and receive from all such 
consumer reporting agencies copies of any and all such investigative consumer 
reports; (3) must provide a list of all questions to be asked in the investigation and 
the likely sources to be contacted in the investigation; and (4) must provide a 
blank copy of any standard questionnaire, or other similar form to be used in the 
investigation. 

§ 380-e. Disclosures to consumers, (a) Every consumer reporting agency shall, 
upon request and proper identification of any consumer, clearly and accurately 
disclose to the consumer: 

(1) all information in its files on the consumer at the time of the request; 

(2) the sources of the information; 

(3) the recipients of any consumer report or investigative consumer report on 
the consumer which it has furnished: 

(i) for employment purposes within the two-year period preceding the request, 
and 

(ii) for any other purpose within the six-month period preceding the request, 
(b) The requirements of subdivision (a) respecting the disclosure of source of 

information and the recipients of consumer reports do not apply to information 
received or consumer reports furnished prior to the effective date of this article 
except to the extent that the matter involved is contained in the files of the con- 
sumer reporting agency on that date. 
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§ 380-L Methods and conditions of disclosure to consumers, (a) A consumer 
reporting agency shall make the disclosures required under section three hundred 
eighty-e during normal business hours and on reasonable notice, 

(b) The disclosures required under section three hundred eighty-e shall be made 
to the consumer by one or more of the following methods: 

(!) to person if he appears In person and furnishes proper identification, and 
in any such case the consumer shall be permitted a personal visual inspection of 
his file; or 

(2) by telephone if he has made a written request, with proper identification, for 
telephone disclosure and the toll charge, if any, for the telephone call is prepaid 
by or charged directly to the consumer, In the event the telephone call is made 
after an adverse consumer {determination, the cost of such call shall be paid by 
the consumer reporting agency; or 

(3) by mailing a copy of the consumer's file to him, if he has made a mitten 
request with proper identification, at a charge for photocopying not to exceed ten 
cents per page. In the event that the request for a copy of the consumer's file is 
made after an adverse consumer determination, the cost of such disclosure shall 
be paid by the consumer reporting agency, 

(c) Any consumer reporting agency shall provide trained personnel to explain 
to the consumer any information furnished to him either by personal interview or 
telephone communication, and information furnished by mail must be accom- 
panied by an explanation of such information if provided in code or trade termi- 
nology, 

(d) The consumer who seeks disclosure by means of a personal interview pur- 
suant to paragraph (1) of subdivision (b) of this section shall be permitted to be 
accompanied by one other person of his choosing, who shall furnish reasonable 
identification* A consumer reporting agency may require the consumer to furnish 
a written statement granting permission to die consumer reporting agency to discuss 
the consumer's file in such person's presence* 

§ 380-fg, Procedure for correcting inaccurate, irrelevant sod misleading infor- 
mation, (a) A consumer reporting agency shall adopt reasonable procedures to 
enable a consumer to correct any inaccurate, irrelevant or misleading information 
in his file* 

(b) If a consumer disputes any item of information contained in his file on the 
ground that it is inaccurate, irrelevant or misleading, and such dispute is directly 
conveyed to the consumer reporting agency by the consumer, the consumer re- 
porting agency shall promptly reinvestigate and record the current status of such 
information, unless it has reasonable grounds to believe that the dispute by the 
consumer is frivolous, and it shall promptly notify the consumer of the result of 
its investigation and his rights pursuant to subdivisions (d), (e) and (f) of this 
section* The presence of contradictory information in a consumer's file shall not, 
in and of itself, constitute reasonable grounds for believing the dispute is frivolous* 

(c) Upon re-investigation the consumer reporting agency shall record in the 
consumer's file the efforts undertaken to re-investigate the dispute, including but 
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not limited to the names of the person or persons conducting the reinvestigation, 
and the names of the persons who provided information in connection with the 
reinvestigation. 

(d) If, after conducting the re-investigation prescribed by subdivision (b) of this 
section, the consumer reporting agency finds that an Item is in error or that it can 
no longer be verified, it shall* (1) promptly expunge the item and otherwise correct 
the file, (2) refrain from reporting the item in subsequent consumer reports, and (3) 
promptly notify all persons who have received information regarding the item 
during the previous two years that an error existed and furnish them with the 
corrected information, 

(e) If, after conducting the re-investigation prescribed by subdivision (b) of this 
section, the consumer reporting agency Is unable to resolve any difference still 
remaining between the allegations made by its sources and the consumer, it shall, 
(1) promptly indicate In the file that the item is disputed, (2) permit the consumer 
to file a statement containing the nature of the dispute; the agency may limit such 
statements to not more than one hundred words If it provides the consumer with 
assistance in writing a clear summary of the dispute, (3) include the consumer's 
statement of the dispute in all subsequent credit reports containing die information 
in question, and (4) clearly note in all subsequent consumer reports that the item 
is disputed by the consumer. 

(f) Following any deletion of information which Is found to be inaccurate or 
the accuracy of which can no longer be verified or any notation as to disputed 
information, the consumer reporting agency shall furnish notification that the item 
has been deleted and include a copy of the consumer's statement, where applicable, 
in accordance with subdivision (e) of this section, to any person who has received 
a consumer report within two years prior thereto* 

§ 380-h. Public record information for employment purposes* A consumer 
reporting agency which furnishes a consumer report for employment purposes and 
which for that purpose compiles and reports items of information on consumers 
which are matters of public record and are likely to have an adverse effect upon a 
consumer's ability to obtain employment shall: 

(a) At the time such public record information is reported to the user of such 
consumer report, notify die consumer of the fact that public record information is 
being reported by the consumer reporting agency, together with die name and 
address of the person to whom such information is being reported; or 

(b) Maintain strict procedures designed to insure that whenever public record 
information which is likely to have an adverse effect on a consumer's ability to 
obtain employment is reported it is complete and up to date. For purposes of this 
subdivision, items of public record relating to convictions, suits, tax liens, and out- 
standing judgments shall be considered up to date if the current public record status 
of the item at the time of die report is reported, 

§ 38(M* Restrictions on investigative consumer reports, (a) Whenever a con* 
sumer reporting agency prepares an investigative consumer report, no adverse 
information in the consumer report (other than information which Is a matter of 
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public record) may be included in a subsequent consumer report unless such 
adverse information has been verified in the process of making such subsequent 
consumer report, or the adverse information was received within the three-month 
period preceding the date the subsequent report is furnished. 

(b) Each investigative consumer report shall be in writing, shall identify the 
sources of all information contained therein, and shall be retained in the file of 
the consumer to whom it relates for a period of one year following its completion, 

§ 380-j, Requirements on users of consumer reports, (a) Whenever any adverse 
action is taken either wholly or partly because of information contained in a con- 
sumer report or partly because of information contained In a consumer report from 
a consumer reporting agency, the user taking such action shall: 

(1) disclose in writing to the consumer against whom such adverse action has 
been taken (0 the reason for taking such adverse action, including reference to 
the particular item or items of Information contained in the consumer report upon 
which such adverse action has been wholly or partly based; (ii) the name, street 
address, and telephone number of the consumer reporting agency making the re- 
port; and (ill) a statement of the fact that the consumer is entitled to obtain the 
specific methods of disclosure of his file provided for in section three hundred and 
elghty-f; and 

(2) furnish a copy of the consumer report If the consumer report was written, or 
furnish a copy of a summary if the consumer report was oral. 

(b) Whenever credit or insurance for personal, family* or household purposes, 
or employment involving a consumer is denied or the charge for such credit or 
insurance is increased either wholly or partly because of Information obtained from 
a person other than a consumer reporting agency bearing upon the consumer's 
credit worthiness, credit standing, credit capacity, character, general reputation, 
personal characteristics, or mod© of living, the user of such information shall dis- 
close in writing to the consumer at the time such action is taken the reason for such 
adverse action, and the nature of the information, 

(c) Whenever a user or potential user of consumer reports procures or causes 
to be prepared a consumer report on any consumer, such user or potential user 
shall be required to comply with the requirements of this article, 

(d) Every user of a consumer report or an investigative consumer report shall 
be prohibited from disseminating any such report to any other person, 

§ 3804c. Prohibited information, accuracy, relevancy and obsolescence of in- 
formation in reports, (a) Neither a consumer reporting agency nor a merchant shall 
collect, evaluate, prepare, use or report information which is not reasonably 
relevant to the purpose for which it is sought. 

Neither a consumer reporting agency nor a merchant shall collect evaluate, 
prepare, use or report information relative to an arrest or a criminal conviction for 
such offense, or information based on uncorroborated hearsay, or information about 
a consumer's race, religion, color, ancestry, ethnic origin, personal life style, 
philosophy, or political affiliation. 
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(b) Neither a consumer reporting agency nor a merchant shall collect, evaluate, 
prepare, use or report information which is obsolete or which it has reason to 
know is inaccurate or irrelevant, 

(e) A consumer reporting agency and a merchant shall adopt and follow reason- 
able procedures designed to (1) assure maximum possible accuracy of the infor- 
mation concerning the individual about whom the report relates, (2) verify the 
accuracy and the relevancy of such information, and (3) exclude inaccurate and 
irrelevant information from their files, 

(d) (1) Except as authorized under paragraph two of this subdivision, no con- 
sumer reporting agency may make any consumer report containing any of the 
following items of information: 

(i) bankruptcies which, from date of adjudication of the most recent bankruptcy, 
antedate the report by more than fourteen years. 

(ii) suits and judgments which, from date of entry, antedate the report by more 
than seven years or until the governing statute of limitations has expired, which- 
ever is the longer period, 

(Hi) paid tax liens which, from date of payment, antedate the report by more 
than seven years. 

(iv) accounts placed for collection or charged to profit and loss which antedate 
the report by more than seven years, 

(v) records of conviction of crime which, from date of disposition, release, or 
parole, antedate the report by more than seven years, 

(vi) information regarding drug or alcoholic addiction where the last reported 
incident relating to such addiction antedates the consumer report or investigative 
consumer report by more than seven years, 

{vii) information relating to past confinement in a mental institution where the 
date of last confinement antedates the report by more than seven yean, 

(viii) any other adverse item of information which antedates the report by more 
than seven years. 

(2) The provisions of paragraph one of this subdivision are not applicable in 
the case of any consumer credit report to be used in connection with: 

(i) a credit transaction involving, or which may reasonably be expected to in- 
volve a principal amount of fifty thousand dollars, or more; 

(ii) the underwriting of life insurance involving, or which may reasonably be 
expected to involve, a face amount of fifty thousand dollars or more; 

(iii) the employment of any individual at an annual salary which equals, or which 
may reasonably be expected to equal twenty-five thousand dollars, or more; 

(e) No consumer reporting agency shall issue a consumer report which lists a 
person as having been denied credit if the sole reason for such denial is lack of 
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sufficient information to grant credit, unless the report states that the denial was 
for such reason, 

§ 380-L Civil liability for willful noncompliance. Any consumer reporting 
agency or user of information which willfully and knowingly fails to comply with 
any requirement imposed under this article with respect to any consumer is liable 
to that consumer in an amount equal to the sum of: 

(a) Any actual damages sustained by the consumer as a result of the failure; 

(b) Such amount of punitive damages as die court may allow; and 

(c) In the case of any successful action to enforce any liability under this 
section, the costs of the action together with reasonable attorney's fees as deter- 
mined by the court. o 

§ 380-m* Civil liability for negligent noncompliance* Any consumer reporting 
agency or user of information which is negligent in failing to comply with any re- 
quirement imposed under this article with respect to any consumer is liable to that 
consumer in an amount equal to the sum of: 

(a) Any actual damages sustained by the consumer as a result of the failure; 

(b) Such amount of special damages as the court may allow, but not less than one 
hundred dollars for each item of erroneous information reported; and 

(c) Jh the case of any successful action to enforce any liability under this section, 
the costs of the action together with reasonable attorney's fees as determined by 
die court, 

§ 380-n. Jurisdiction of courts; limitation of actions. An action to enforce any 
liability created under this article may be brought in any court of competent juris- 
diction, within two years from the date on which the liability arises, except that 
where a defendant has materially and willfully misrepresented any information 
required under this title to be disclosed to an individual and the information so 
misrepresented Is material to the establishment of the defendant's liability to that 
individual under this article, the action may be brought at any time within two years 
after the discovery by the individual of the misrepresentation, 

§ 380-O* Obtaining information under false pretenses. Any person who knowing- 
ly and willfully obtains information on a consumer from a consumer reporting 
agency under false pretenses shall be fined not more than five thousand dollars or 
imprisoned not more than one year, or both. 

§ 380-p Unauthorized disclosures by officers or employees. Any officer or em- 
ployee of a consumer reporting agency who knowingly and willfully provides in- 
formation concerning an individual from the agqncy's files to a person not authorized 
to receive information shall be fined not more than five thousand dollars or im- 
prisoned not more than one year, or both, 
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§ 380-q. Merchant harassment, No merchant shall threaten any consumer with 
consequences adverse to his credit standing by reason of a report to be made by the 
merchant to a consumer reporting agency. Nothing in this section shall prohibit a 
merchant from reporting information to a consumer reporting agency in conformity 
with this article, 

§ 380-r* Severability. If any provision of this article or the application thereof 
to any person or circumstances is held to be invalid, such invalidity shall not affect 
other provisions or applications of this article which can be given effect without the 
invalid provision or application, and to this end the provisions of this article are 
severable, 

§ 3, Articles twenty-five-A and twenty-five-B of such law are hereby renumbered 
to be articles twenty-fiye-B and twenty-five-C* respectively. 

§ 4, This act shall take effect on the first day of July next succeeding the date on 
which it shall have hecome a law. 
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COMMONWEALTH OF MASSACHUSETTS 

House , No. 3152 

January 8 9 1975 

By Mr, Mofenson of Newton, petition of David J. Mofenson and Chester G. 
Atkins for legislation to protect personal privacy by prohibiting unwarranted dis- 
closure of personal bank and telephone records, The Judiciary* 

In the Year One Thousand Nine Hundred and Seventy-Five, 

An Act to protect personal privacy by prohibiting unwarranted dis- 
closure OF PERSONAL BANK AND TELEPHONE RECORDS, 

Be it enacted by the Senate and House of Representatives in General Court as- 
sembled, and by the authority of the same, as follows: 

SECTION 1. Chapter 166 ©f the General Laws is hereby amended by inserting, 
after Section I5D, the following section: — 

Section 15E t No telephone company doing business within the commonwealth 
shall divulge any information concerning any of its customers or subcribers to any 
individual, corporation, partnership, association, or governmental entity, except as 
may be required by federal law or permitted by statute of the commonwealth or 
except upon presentation of a proper subpoena from a court of law, upon written 
request of such customer or subscriber, or in order to arrange for collection of un- 
paid bills, Any such company which violates any provision of this section shall be 
liable to the customer or subscriber to whom such information relates for the 
greater of the following amounts: (a) one thousand dollars, plus costs and reasonable 
attorney fees; or (b) three times the amount of actual damages, if any, sustained 
plus costs and reasonable attorney fees, 

SECTION 2, Section 1 of Chapter 167 of the General Laws as most recently 
amended by section 1 of chapter 452 of the acts of 1935, is hereby further amended 
by inserting, at the end thereof, the following definitions — 

"Customer", an individual, partnership, corporation, firm, or association which 
conducts any banking transaction with a bank, including, but not limited to, open- 
ing and depositing or withdrawing funds from a savings or checking account, seek- 
ing or obtaining a loan, mortgage, or other indebtedness, making payment upon 
such loan, mortgage, or debt, or seeking or maintaining a credit card issued by a 
bank, 

SECTION 3. Chapter 167 of the Oeneral Laws is hereby amended by inserting, 
after section 48B, the following section: — 
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Section 48C, No individual, partnership, association or corporation operating a 
bank or savings and loan association in the commonwealth shall divulge any in- 
formation concerning any of its customers to any individual, corporation, partner- 
ship, association, or governmental entity, except as may be required by federal law 
or permitted by statute of the commonwealth or except upon presentation of a 
proper subpoena from a court of law, upon written request of such customer, or in 
order to arrange tor the collection of unpaid debts* Any such individual, partnership, 
association or corporation which violates any provision of this section shall be liable 
to the customer to whom such information relates for the greater of the following 
amounts; (a) one thousand dollars, plus costs and reasonable attorney fees; or (b) 
three times the amount of actual damages, if any, sustained, plus costs and reason- 
able attorney tosa, 

SECTION 4, This act shall take effect on January first, nineteen hundred and 
seventy-six* 
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CALIFORNIA LiQiSLATURI 
1875-76 REGULAR SESSION 

Assembly Bill . » * .No. 1429 

Introduced by Assemblyman Sieroty 
(Coauthor: Senator Carpenter) 

April 3, 1979 

REFERRED TO COMMITTEE ON CRIMINAL JUSTICE 

An act to amend Section 10145 mA 10146 of the Business: mi Pvofessioni 
Code ? and to repeal Section 1917 of the FiEtascM Code, mi to amend Sections 
12137 end 12586 of, and add Chapter 20 (commencing with Section 7460) to 
Division 7 ol Tide 1 of ? the Government Code? to add Jettons 904 and 1703 to 
the Insurance Code, and to amend Section 11703 of the Vehicle Code, relating to 
financial records, 

LEGISLATIVE COUNSEL'S DIGEST 

AB 1429, as introduced, Sieroty (CrimJ.). Financial records; search and seizure. 

Presently, the law does not provide lor a special procedure to be followed vthm 
a state or local agency seeks to examine financial records* of a customer In the 
course of a civil or criminal investigation, 

This bill enacts the "California Right to Financial Privacy Act," It provides 
that no officer, employee* or agent of a state or local agency, as defined, or de- 
partment thereof, may request or obtain from a financial institution, as defined, 
copies of financial records or information from such records on any customer ex- 
cept in specified circumstances and by specified procedures, and limits the use 
of financial records authorized to be received, 

This bill makes a violation of the California Right to Financial Privacy Act a 
misdemeanor. It authorises injunctive relief, and reasonable attorney^ fees upon 
successful action. 

The bill requires specified persons, corporations, and licensees to authorize 
specified state agencies to examine various financial records as a condition of doing 
business, obtaining a license, or exercising privileges. 

It provides that neither appropriation is made nor obligation created for the 
reimbursement of any local agency for any costs incurred by it pursuant to this 
act. 

Vote: majority. Appropriation: no, Fiscal committee: no, State-mandated local 
program: no state funding, 
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The people of the State of California da m&ct as fellows: 

SECTION I, Section 10145 of the Business and Professions Code is amended 
to read: 

10145, A real estate licensee who accepts funds from others in connection with 
any transaction subject to this part who does not immediately place such fundi into 
a neutral escrow depository or into the hands of his principal shall place such funds 
into a trust fund account maintained by him in some bank or recognized depository 
and shall retain all such funds in the account until such time as he has made a 
disbursement of the funds in accordance with instructions from the principal or 
principals in the transaction; provided that a real estate broker when acting as a 
principal pursuant to Section 1013 LI or Article 6 (commencing with Section 
10237) of this part shall place all purchase funds for real property sales contracts 
or promissory notes secured directly or collaterally by liens on real property being 
sold by him in a neutral escrow depository unless delivery of the note or contract 
is made simultaneously with the receipt of the funds. A separate record shall be 
maintained of all moneys received subject to this section and shall further indicate 
the disposition thereof. Upon request of the commissioner a licensee shall furnish 
to the commissioner an authorization for examination of financial records of any 
such trust fund account, maintained in a financial institution, in accordance with 
the procedures set forth in Section 7473 of the Government Code, 

As used in this section "neutral escrow** means an escrow business conducted by 
a person licensed under Division 6 (commencing with Section 17000) of the 
Financial Code or by any person described by subdivision (a) of Section 17006 
and subdivision (c) of Section 17006 of said code, 

SECTION 2* Section 10146 of the Business and Professions Code is amended to 
read: 

10146. Any real estate broker who contracts for or collects an advance fee 
from any other person, hereinafter referred to as the "principal," shall deposit any 
such amount or amounts, when collected in a trust account with a bank or other 
recognized depository, Such funds are trust funds and not the funds of the agent 
Amounts may be withdrawn therefrom for the benefit of the agent only when 
actually expeBded for the benefit of the principal or five days after the verified 
accounts mentioned hereinafter have been mailed to the principal U^n request 
of the commissioner a broker shall furnish to the commissioner an authorization 
for examination of financial records of the trust account in accordance with the 
procedures set forth in Section 7473 of the Government Code, 

The commissioner may issue such rules and regulations as he deems necessary 
to regulate the method of accounting, and to accomplish the purpose of the pro- 
visions of this code relating to advance fees including, but not limited to, establish- 
ing forms for and determining information to be included in such accountings. 
Each principal shall be furnished a verified copy of such accountings at the end of 
each calendar quarter and when the contract has been completely performed by 
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the licensee, The Real Estate Commissioner shall be furnished a verified copy of 
any account or ail accounts on his demand therefor. 

Where advance fees actually paid by or on behalf of any principal are not handled 
in accordance with the preceding paragraph, it shall be presumed that the agent 
has violated Sections 506 and 506a of the Penal Code, The principal may recover 
treble damages for amounts so misapplied and shall be entitled to reasonable at- 
to^leys , fees in any action brought to recover the same* 

SECTION 3, Section 1917 of the Financial Code is repealed, 

SECTION 4 t Chapter 20 (commencing with Section 7460) is added to Division 
7 of Title 1 of the Government Code, to read: 

CHAPTER 20. GOVERNMENTAL ACCESS TO FINANCIAL RECORDS 

Article 1. Declaration of Policy 

7460. This chapter shall be knowi as the "California Rlghi to Financial Privacy 
Act," 

7461, The Legislature finds and declares as follows; 

(a) Procedures and policies governing the relationship between financial institu- 
tions and government agencies have in some eases developed without due regard to 
citizens* constitutional rights* 

(b) The California Supreme Court has recognized that there is a right to privacy 
under Section 13 of Article I of the California Constitution with respect to financial 
records held by a financial institution, 

(c) The confidential relationships between financial institutions and their 
customers are built on trust and must be preserved and protected, 

(d) The purpose of this chapter is to protect the confidential relationship be» 
fcween financial institutions and their customers and the constitutional rights of 
citizens inherent to that relationship. 

Article 2, Definitions 
7465, For the purpose? of this chapter: 

(a) Trie term "financial Institution-* includes state and national banks, state and 
federal savings and loan associations, trust companies, industrial ban companies, 
and state and federal credit unions, 

(b) The term "financial records" means any original or any copy of any record 
or document held by a financial institution pertaining to a customer of the financial 
institution. 

(c) The term "person" means an individual, partnership, corporation, association, 
trusty or any other legal entity organized under the laws of this state, 

(d) The term "customer" means any person who has transacted business with 
or has used the services of a financial institution or for whom a financial institution 
has acted as a fiduciary* 
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(e) The term "state agency 1 * means every state office, officer, department, division, 
bureau, board, and commission or other state agency* 

(f) The term "local agency" includes a county; city, whether general law or 
chartered; city and county; school district; municipal corporation; district; political 
subdivision; or any board, commission or agency thereof; or other local public 
agency, 

(g) The term "supervisory agency-' means any of the following: 

(1) The State Banking Department 

(2) The Department of Savings and Loans, 

(3) The Department of Corporations. 

(4) The State Controller, 

(5) The Franchise Tan Board, 

(6) The State Board of Equalization. 

(h) The term "investigation" includes, but is not limited to, any inquiry by a 
peace officer, sheriff, or district attorney, or any inquiry made for the purpose of 
determining whether there has been a violation of any law enforceable by im- 
prisonment, fine, or monetary liability, 

Article 3. Confidentialitv of, and Access to, Financial Records 

7470, (a) Except as provided in Section 7480, no officer, employee, or agent of 
a state or local agency or department thereof, in connection with a civil or criminal 
investigation of a customer, whether or not such investigation is being conducted 
pursuant to forma] judicial or administrative proceedings, may request or receive 
copies of, or the information contained in, the financial records of any customer 
from a financial institution unless the financial records are described with parti- 
cularity and are consistent with the scope and requirements of the investigation 
giving rise to such request and: 

(1) Such customer has authorized disclosure to such officer, employee or agent 
of such state or local agency or department thereof in accordance with Section 
7473; or 

(2) Such financial records are disclosed in response to an administrative sub- 
poena or summons which meets the requirements of Section 7474; or 

(3) Such financial records are disclosed in response to a search warrant which 
meets the requirements of Section 7475; or 

(4) Such financial records are disclosed In response to a judicial subpoena or 
subpoena duces tecum which meets the requirements of Section 7476, 

(b) In any proceeding relating to such subpoenas, summons, or search warrants, 
the customer shall have the same rights as if the records were in his possession, 

(c) Nothing in this section or in Sections 7473, 7474, 7475, and 7476 shall 
require a financial Institution to inquire or determine that those seeking disclosure 
have duly complied with the requirements set forth therein, provided only that the 
customer authorization, administrative subpoena or summons, search warrant, or 
judicial subpoena or order served on or delivered to a financial institution pursuant 
to such sections shows compliance on its face, 

(d) The financial Institution shall maintain for a period of five years a record 
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of all examinations or disclosures of the financial records of a customer including 
Jhe identity and purpose of the person examining the financial records* the state or 
local agency or department thereof which he represents, and, where applicable, a 
copy of the customer authorization, subpoena, summons or search warrant pro- 
viding for such examination or disclosure or a copy of the certified crime report 
received pursuant to subdivision (b) of Section 7480, Ajiy record maintained pur- 
suant to this subdivision shall be available at the office or branch where the 
customer's account is located during normal business hours for review by the 
customer upon request, A copy of such record shall be furnished to the customer 
upon request and payment of the reasonable cost thereof, 

747 1. (a) Except in accordance with requirements of Section 7473, 7474, 7475, 
or 7476, no financial institution, or any director, officer, employee, or agent of a 
financial institution, may provide or authorise another to provide to an officer, 
employee, or agent of a state or local agency or department thereof, any financial 
records, copies thereof, or the information contained therein, if the director, officer, 
employee or agent of the financial institution knom or has reasonable cause to 
believe that such financial records or information are being requested in connection 
with a civil or criminal investigation of the customer, whether or not such investiga- 
tion is being conducted pursuant to formal judicial or administrative proceedings, 

(b) This section is not intended to prohibit disclosure of the financial records 
of a customer or the information contained therein incidental to a transaction in 
the normal course of business of such financial institution if tho director, officer, 
employee or agent thereof making or authorizing the disclosure has no reasonable 
cause to believe that the financial records or the information contained in the 
financial records so disclosed will be used by a state or legal agency or department 
thereof in connection with an investigation of the customer, whether or not such 
investigation is being conducted pursuant to formal judicial or administrative 
proceedings. 

(c) This section shall not preclude a financial institution, in its discretion, from 
initiating contact with, and thereafter communicating with and disclosing customer 
financial records to, appropriate state or local agencies concerning suspected viola- 
tion of any law, 

(d) A financial Institution which refuses to disclose the financial records of a 
customer, copies thereof or the information contained therein, in reliance in good 
faith upon the prohibitions of subdivision (a) shall not be liable to its customer, 
to a state or local agency, or to any other person for any loss or damage caused in 
whole or in part by such refusal, 

7472. Copies of financial records or the information contained therein, including 
information supplied pursuant to subdivision (b) of Section 7480, which are 
obtained by any state agency, local agency or supervisory agency may not be: 

(a) Used or retained in any form for any purpose other than the specific statu* 
tory purpose for which the information was originally obtained; or 

(b) Provided to any other governmental department or agency or other person 
except where authorized by state law. If in the course of an investigation conducted 
pursuant to the provisions of this chapter, an officer, employee, or agent of a state 
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or local agency or department thereof* discovers financial records indicating a 
possible violation of law which such agency is without statutory authority to 
investigate or prosecute, the information in such financial records may s in the 
discretion of the agency and unless otherwise precluded by law, be provided to 
the district attorney of the county in which such financial records were examined 
or to the Attorney General. 

7473, (a) A customer may authorize disclosure under paragraph (1) ©f sub- 
division (a) of Section 7470 if those seeking disclosure furnish to the financial 
institution a signed and dated statement by which the customer: 

(1) Authorizes such disclosure for a period to be set forth in the authorization 
statement; 

(2) Specifies the name of the agency or department to which disclosure is 
authorized and, if applicable, the statutory purpose for which the information is 
to be obtained; and 

(3) Identifies the financial records which are authorized to be disclosed, 

(b) No such authorization shall be required as a condition of doing business 
with such financial institution. 

(c) Any officer, employee or agent of a state or local agency seeking customer 
authorization for disclosure of customer financial records shall notify the customer 
that the customer has the right at any time to revoke such authorization, except 
where such authorization is required by statute. 

(d) An agency or department examining the financial records of a customer 
pursuant to this section shall notify the customer in writing within 30 days of such 
examination. Such notice shall specify the financial records which were examined 
and the reason for such examination* 

7474, (a) An officer, employee, or agent of a state or local agency or depart- 
ment thereof, may obtain financial records under paragraph (2) of subdivision (a) 
ot Section 7470 pursuant to an administrative subpoena or summons otherwise 
authorized by law and served upon the financial institution only if: 

(1) The person issuing such administrative summons or subpoena has served a 
copy of the subpoena or summons on the customer pursuant to Chapter 4 (com- 
mencing with Section 413,10) of Title 5 of Part 2 of the Code of Civil Procedure; 
and 

(2) The subpoena or summons includes the name of the agency or department 
in whose name the subpoena or summons is issued and the statutory purpose for 
which the information is to be obtained; and 

(3) The customer has not moved to quash such subpoena or summons within 
1 0 days of service, 

(b) Nothing in this chapter shall preclude a financial institution from notifying 
a customer of the receipt of an administrative summons or subpoena. 

7475, An officer, employee, or agent of a state or local agency or department 
thereof, may obtain financial records under paragraph (3) of subdivision (a) of 
Section 7470 only if he obtains a search warrant pursuant to Chapter 3 (com- 
mencing with Section 1523) of Title 12 of Part 2 of the Penal Code, Examination 
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of financial records may occur as soon as the warrant is served on the financial 
institution, 

7476, (a) An officer, employee, or agent of a state or local agency or depart- 
ment thereof, may obtain financial records under paragraph (4) of subdivision 
(a) of Section 7470 pursuant to a judicial subpoena or subpoena duces tecum 
only if: 

(1) The subpoena or subpoena duces tecum is issued and served upon the 
financial institution: and the customer In compliance with Chapter 2 (commencing 
with Section 1985) of Title 3 of Part 4 of the Code of Civil Procedure; and 

(2) Ten days pass without notice to the financial institution that the customer 
has moved to quash the subpoena. If testimony Is to be taken, or financial records 
produced, before a court, the 10--day period provided for in this subdivision may 
be shortened by the court issuing the subpoena or subpoena duces tecum upon a 
showing of reasonable cause. The court shall> direct that all reasonable measures 
be taken to notify the customer within the time so shortened, 

(b) (1) A grand jury, upon resolution adopted by a majority of its members, 
may obtain financial records pursuant to a judicial subpoena or subpoena duces 
tecum which upon a showing of probable cause, is personally signed and issued 
by a judge of the superior court in accordance with Section 939,2 of the Penal 
Code, 

(2) Upon issuing such subpoena or subpoena duces tecum, the judge shall 
order the grand jury to notify the customer in writing within 30 days of such 
issuance; provided, however, that the judge may shorten the 3CMay period, or 
upon a showing of good cause, may extend such period beyond 30 days, but not 
beyond the date on which such grand jury Is to be discharged. The notice shall 
specify the financa! records which were examined and the reason for such exami- 
nation, 

Article 4. Exceptions 

7400, Nothing in this chapter prohibits any of the following: 

(a) The dissemination of any financial information which is not identified with, 
or identifiable as being derived from, the financial records of a particular customer. 

(b) When any police or sheriffs department or district attorney in this state 
certifies to a bank in writing that a crime report has been filed which involves 
the alleged fraudulent use of drafts, checks or other orders drawn upon any blink 
in this state, such police or sheriffs department or district attorney may request a 
bank to furnish, and a bank shall supply, a statement setting forth the following 
information with respect to a customer aeeount specified by the police or sheriffs 
department or district attorney for a period 30 days prior to and up to 30 days 
following die date of occurrence of the alleged illegal act involving the account: 

(i) The number of items dishonored; 

(ii) The number of items paid which created overdrafts; 

(iii) The dollar volume of such dishonored items and items paid which created 
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overdrafts and a statement explaining any credit arrangement between the bank 
and customer to pay overdrafts; 

(iv) The dates and amounts of deposits and debits and the account balance on 
such dates; 

(v) A copy of the signature appearing on a customer's signature card; 

(vi) Date account opened and, if applicable, date account closed* 

(c) Subject to the limitations in Section 7472 s the examination by, or disclosure 
to* any supervisory agency of financial records which relate solely to the exercise 
of its supervisory function, The scope of an agency's supervisory function shall 
be determined by reference to statutes which grant authority to examine, audit, or 
require reports of financial records or financial institutions as follows: 

(1) With respect to the Superintendent of Banks by reference to Division 1 
(commencing with Section 99) of the Financial Code, 

(2) With respect to the Department of Savings and Loans by reference to 
Division 2 (commencing with Sectton 5000) of the Financial Code, 

(3) With respect to the Corporations Commissioner by reference t© Division 5 
{commencing with Section 14000) and Division 7 (commencing with Section 
18000) of the Financial Code, 

(4) With respect to the State Controller by reference to Title 10 (commencing 
with Section 1300) of Part 3 of the Code ©f Civil Procedure. 

(5) With respect to the Franchise Tax Board and the Board of Equalization by 
reference to the Revenue and Taxation Code relating to the enforcement and 
administration of tax laws, 

Article 5* Penalties and Remedies 

7485, (a) Any person who willfully or knowingly participates in a violation of 
this chapter is guilty of a misdemeanor s and upon conviction shall be imprisoned 
for not more than one years or fined not more than five thousand dollars ($5,000), 
or both. 

(b) Any person who induces or attempts to induce a violation of this chapter 
is guilty of a misdemeanor and upon conviction shall be imprisoned for not more 
than one year, or fined not more than five thousand dollars ($5,000), ©r both, 

7486, In any successful action to enforce liability for a violation of the pro- 
visions of this chapte^nhe customer may recover the cost of the action together 
with reasonable attorney's fees as determined by the court, 

7487, In addition to any other remedy contained in this chapter or otherwise 
availably injunctive relief shall be available t© any customer aggrieved by a viola* 
tion s or threatened violation, of this chapter in the same manner as such injunctive 
relief would be available if the financial records concerning the customer account! 
were in his possession, In any successful action by the customer, costs together 
with reasonable attorney's fees as determined by the court may be recovered, 

7488, An action to enforce any provision of this chapter must be commenced 
within three years after die date on which the violation occurred, 
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Article 6, Miscellaneous 

7490, Except ai provided in Section 7473, no waiver by a customer of any 
right hereunder shall be valid, whether oral or written, and whether with or 
without consideration, 

7491, Should any other law grant or appear to grant power or authority to any 
person to violate the provisions of this chapter, the provisions of this chapter shall 
supersede and pro tanto override and annul such law, except those statutes 
hereinafter enacted which specifically refer to this chapter, 

7492, If any provision of this chapter or the application thereof to any person 
or circumstance is held invalid for any reason, such invalidity shall not affect any 
other provisions or applications of this chapter which can be effected, without 
the invalid provision or application, and to this end the provisions of this chapter 
are severable, 

SECTION 5. Section 12537 of the Government Code is amended to read: 
12537, The Attorney General shall maintain a register of health care service 
plans. On or before March 31 of the calendar year following the effective date of 
this article and annually thereafter, each health care service plan shall register with 
the Attorney General by submitting the name, organizational form and principal 
place of business of the plan and the following: 

(a) A form of each standard membership contract which the plan proposes to 
issue, including standard forms in use on the date of submission, 

(b) Copies of all advertising which the plan proposes to use, 

(c) An authorization for disclosure to the Attorney General of financial records 
of the health care service plan pursuant to Section 7473 of the Government Code, 

(d) Such other pertinent and relevant information as the Attorney General may 
reasonably require for the proper administration of this article; provided, however, 
that 

(1) Nothing in this article shall affect or modify the physician-patient relation- 
ship prescribed in Section 1881 of the Code of Civil Procedure; and 

(2) All information furnished under this paragraph fd) shall be kept confidential 
by the Attorney General, except to the extent that it may be produced In any 
judicial or administrative proceeding and may be admissible in evidence therein, 

SECTION 6, Section 12586 of the Government Code is amended to read: 
12586, (a) Except as otherwise provided and except corporate trustees which 
are subject to the jurisdiction of the Superintendent of Banks of the State of Call* 
forma or to the Comptroller of Currency of the United States, every charitable 
corporation and trustee subject to this article shall, in addition to filing copies of 
the instruments previously required, file with the Attorney General: (i) periodic 
written reports, under oath, setting forth information as to the nature of the assets 
held for charitable purposes and die administration thereof by the corporation or 
trustee, in accordance with rules and regulations of the Attorney General; (ii) an 
authorization for disclosure to the Attorney General of financial records of the 
charitable corporations pursuant to Section 7473 of the Government Code, 
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(b) The Attorney General shall make rules and regulations as to the time for 
filing reports, the contents thereof, and the manner of executing and filing them. 
He may classify trusts and other relationships concerning property held for a 
charitable purpose as to purpose, nature of assets, duration of the trust or other 
relationship, amount of assets, amounts to be devoted to charitable purposes, 
nature of trustee, or otherwise, and may establish different rules for the different 
classes as to time and nature of the reports required to the ends (1) thai he shall 
receive reasonably current, periodic reports as to all charitable trusts or other 
relationships of a similar nature, which will enable him to ascertain whether they 
are being properly administered, and (2) that periodic reports shall not unreason- 
ably add to the expense of the administration of charitable trusts and similar rela- 
tionships, The Attorney General may suspend the filing of reports as to a particular 
charitable trust or relationship for a reasonable, specifically designated time upon 
written application of the trustee filed with the Attorney General and after the 
Attorney General has filed in the register of charitable trusts a written statement 
that the interests of the beneficiaries will not be perjudleed thereby and that 
periodic reports are not required for proper supervision by his office, 

<e) A copy of an account filed by the trustee in any court having jurisdiction of 
the trust or other relationships if the account substantially complies with the rules 
and regulations of the Attorney General, may be filed as a report required by this 
section, 

(d) The first report for a trust or similar relationship hereafter established, unless 
the filing thereof is suspended as herein provided, shall be filed not later than 
four (4) months and fifteen (15) days following the close of the first calendar or 
fiscal year in which any part of the income or principal is authorized or required 
to be applied to a charitable purpose. If my part of the income or principal of a 
trust previously established it authorized or required to be applied to a charitable 
purpose at the time this article takes effect, the first report shall be filed at the 
close of the calendar or fiscal year in which it was registered with the Attorney 
General or not later than four (4) months and fifteen (15) days following the close 
of such calendar or fiscal period* 

SECTION 7, Section 904 is added to the Insurance Code, to read- 
904. In addition to the annual statement required to be filed pursuant to Section 
900, each admitted insurer shall file an authorization for disclosure to the com- 
missioner of financial records pertaining to such funds pursuant to Section 7473 
of the Government Code, to be effective until the nest such annual filing, 

SECTION 8, Section 1703 is added to the Insurance Code, to read: 
1703, Every applicant for an original or a renewal license to act as an insurance 
agent, broker or solicitor, life agent* life analyst, surplus line broker, special lines 
surplus line broker, motor club agent, or bail agent or solicitor shall, as part of 
the application, endorse an authorization for disclosure to the commissioner of 
financial records of any fiduciary funds as defined in Section 1733, pursuant to 
Section 7473 of the Government Code* 
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SECTION 9. Section i 1703 of the Vehicle Code is amended to read: 

11703, The department may refuse to issue a license and special plates to a 

manufacturer, manufacturer branch, distributor, distributor branch, transporter^ or 

dealer, when it determines that: 

(a) The applicant was previously the holder of a license and special plates issued 
under this chapter, which license and special plates were revoked for cause and 
never reissued by the department, or which license was suspended for cause and 
the terms of suspension have not been fulfilled. 

(b) The applicant was previously a limited or general partner, stockholder, 
director, or officer of a partnership or corporation whose license and special plates 
Issued under the authority of this chapter were revoked for cause and never re- 
issued or were suspended for cause and the terms of suspension have not been 
terminated, 

(c) If the applicant is a partnership or corporation, that one or more of the 
limited or general partners, stockholders, directors or offices was previously the 
holder or a limited or general partner, stockholder, director or officer of a 
partnership or corporation whose license and special plates issued under the 
authority of this chapter were revoked for cause and never reissued or were 
suspended for cause and the terms of suspension have not been terminated, or 
that by reason of the facts and circumstances touching the organization, conitrol, 
and management of the partnership or corporation business the policy of such 
business will be directed, controlled, or managed by individuals who s by reason of 
their conviction of violations of the provisions of this code, would be ineligible 
for a license and that by licensing such corporation or partnership the purposes of 
this code would likely be defeated, 

(d) The applicant, or one of the limited or general partners, if the applicant 
be a partnership, or one or more of the officers or directors of the corporation, if 
the corporation be the applicant, or one or more of the stockholders if the policy 
of such business will be directed, controlled, or managed by such stockholder or 
stockholders, has ever been convicted of a felony or a crime involving moral 
turpitude. A conviction after a plea of nolo contendere is deemed to be a convic- 
tion within the meaning of this section, 

(e) The information contained in the application is incorrect 

(f) The decision of the department to cancel, suspend or revoke a license has 
been entered, and this applicant was the licensee, a copartner, or an office^ director 
or stockholder of such licensee, 

(g) An applicant for a dealer^ license has failed to effectively endorse an 
authorization for disclosure of an account or accounts relating to the operation of 
the dealership as provided for in Section 7473 of the Government Code, 

SECTION 10i No appropriation is made by this act, nor is any obligation 
created thereby under Section 2231 of the Revenue and Taxation Code, for the 
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reimbursement of any local agency for any costs that may be incurred by it in 
carrying on any program or performing any service required to be carried on or 
peformed by it by this act because the Legislature recognizes that during any 
legislative session a variety of changes to laws relating to crimes and infractions 
may be enacted that serve to cause both increased and decreased costs to local 
governmental entities which, in the aggregate^ do not result in significant identifiable 
cost changes* 
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Assembly Concurrent Resolution No. 192 

STATE OF NEW JiRSEY 
Introduced July 22 f 1974 

By Assemblymen BUR5TEIN, HYNES, MARTIN and BAER 

REFERRED TO COMMITTEE ON JUDICIARY, LAW, PUBLIC SAFETY 

AND DEFENSE 

A Concurrent Resolution creating a commission to study the matter of invasion 
of personal privacy. 

Whereas, The right of privacy of the individual is among the most sacred and 
inalienable rights of man in society, and is a principle implicit in the concept of 
a free and just society; and 

Whereas, The privacy of the individual has become increasingly susceptible to 
encroachment in modern society because of sophisticated and novel innovations 
and methods in numerous fields of science and technology rendering existing law 
inadequate in some instances to protect said privacy; and 

Whereas, Many of the worst invasions of privacy in New Jersey come from insen- 
sitive and intrusive actions by local businesses and State and local government 
agencies, such as, commercial reporting agencies, police arrest records, and 
public school questionnaires; and 

Whereas, The privacy of the individual must be protected from the misuse of 
records and computer data banks; and 

Whereas, It is the duty of the legislative branch of government to inquire into and 
provide remedies for any inequities that may exist; now, therefore 

Be it resolved by the General Assembly of the State of New Jersey (the Senate 
concurring): 

L There is hereby created a commission to consist of eight members, four to be 
appointed by the President of the Senate, two to be Senators and two to be citizens 
from the State at large, and four to be appointed by the Speaker of the General 
Assembly, two to be members of the General Assembly and two to be citizens from 
the State at large. No more than one of each group of two shall be of the same 
political party. The members shall serve without compensation. Vacancies in the 
membership of the commission shall be filled in the same manner as the original 
appointments were made* 

2, The commission shall organize as soon as may be after the appointment of 
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its members and shall select a chairman from among its members and a secretary 
who need not be a member of the commission, 

3. It shall be the duty of said commission to study the methods by which the 
right of privacy may be invaded and the extent thereof, to investigate such invasions 
of privacy, to evaluate the justifications of such invasions, to determine the 
necessity for corrective action, and to make recommendations for protective 
measures and legislation as it deems desirable and appropriate, 

4. The commission shall be entitled to call to its assistance and avail itself of 
the services of such employees of any State, county or municipal department, 
board, bureau, commission or agency as it may require and as may be available 
to it for said purpose, and to employ counsel and such stenographic and clerical 
assistants and incur such traveling and other miscellaneous expenses as it may 
deem necessary, in order to perform its duties, and as may be within the limits 
©f funds appopriated or otherwise made available to it for said purposes, 

5. The commission may meet and hold hearings at such place or places as it 
shall designate during the sessions or recesses of the Legislature and shall report 
its findings and recommendations to the Legislature, accompany the same with any 
legislative bills which it may desire to recommend for adoption by the Legislature* 

STATEMENT 

The purpose of this resolution Is to create a commission which shall study and 
make recommendations concerning the invasion of personal privacy and recom- 
mend protective measures for the increasing encroachment in our society upon the 
privacy of the individual 
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STATE OF OKLAHOMA 
An Act 

ENROLLED HOUSE BILL NO, 1652 

BY: MONKS and WILLIAMS of tbe Mouse and PIERCE and FUNSTON of 
tfce Senate 

AN ACT RELATING TO STATE GOVERNMENT! PROHDBrUNG TOE USE 
OF SOCIAL SECURITY NUMBERS BY STATE AGENCIES, BOARDS* 
COMMISSIONS OR OTHER SUBBrVISIONS OF STATE GOVXRN10INT| 
PROVmiNC CERTAIN EXEMPTIONS; PROHIBITING DISCLOSXJHE OF 
IWFORMATION INDEXED BY SOCIAL SECURITY MUMMRS; AND 

ppoi imi fink; the requiring of disclosure of ones social 

SECURITY NUMBER FOR THE ISSUANCE OF LICENSES BY THE DE- 
PARTMENT OF PUBLIC SAFETY* 

Be it enacted by the people of the State of Oklahoma: 

SECTION L No state agency* board, commission or other unit or subdhfhsido 
of state government shall request or require that any person repeal jis social 
security number in order to obtain services or assistance, nor shall any state agency # 
board, commission or other unit or subdivision of state government use, for any 
purpose, numbers which correspond to the social security number of any person* 
Provided that any state agency, board, commission, unit or subdivision of state 
government using social security numbers for a particular purpose prior to January 
i s 1974* may continue to use and require social security numbers tor that purpose 
only and provided, further, that the provisions of this act shall not be construed to 
prohibit the use or requirement of disclosure of one's social security mraber if the 
use of the' number is related to the Social Security Administration o? benefits 
# thereunder, 

SECTION 2* The Oklahoma Department of Public Safety shall not deny or 
refuse to issue any license because of the failure of any person to disclose his 
social security number upon application for or renewal of such license and the 
Department shall not indicate in any manner that the furnishing of such number 
is mandatory or required for the issuance of such license or any renewal thereof, 

SECTION 3, No state agency, board, commission or other unit or stabdivisioii 
of state government may furnish any information indexed by social security 
number unless required by law or specifically authorized to do so by the holder 
of said iociaJ security number, Provided that this section shall not apply to a 
report produced by a state agency v! Monetary payments made to any state 
official or employee from State Treasury funds or accounts. 

Signed into law 3 May 1974* 
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THE PRIVACY ACT OF 1974 



Privacy Act 
of 1974. 



Congressional 



StaUmst of 



PUBLIC LAW 93-579 
93RD CONGRESS, 5, 3418 
December 31, 1974 

AN ACT 

To amend title 5, Voted States Code, by adding a section 552a to safeguard In- 
dividual privacy from tbe misuse o? Itedeffel records to provide that fndfckhab 
be granted a§§ia to records concmbft Hmm whtifc mi maintained by Federal 
agencies, to establish a Privacy itaftctt« Study Commission, and for other 
purposes* 

Be it enacted by the Senate and Hol&? -of Representatives of the United States 
of America in Congress assembled, The ! a£A* Act m&y be cited as the 'Privacy A<tf 
of 1974". 

Sic, 2. (a) The Confess finds th?>- 

(1) the privacy of in individual is directly- effected by tie colleatiQn, mMa- 
tenanee, use, and dlsssniiaatios of persroal informatbfi by Federal ssgeneies; 

(2) the increasing use of computers md sophisticated information Cechnology, 
while essential to the efiiciect operations of the Goverriment, has greatly mag- 
nified the harm to individual privacy that can occur tan any collection, main* 
tenanee, use, or dissemination of personal information; 

(3 ) the opportunitiii tor m individual to secure employment insurance, and 
credit, and his right to due process, and other legal protections are endangered 
by the misuse of certain information sy§tew; - 

(4) the right to privacy is a personal and fundamental right protected by the 
Constitution of the United States; and 

(5) in order to protect the privacy of individuals identified in information 
systems maintained by Federal agencies, it is necessary and proper for the Con* 
gress to regulate the collection, maintenance, use, and dissemination of informa- 
tion by such agencies. 

(b) The purpose of this Act is to provide certain safeguards for an individual 
against an invasion of personal privacy by requiring Federal agencies, except as 
otherwise provided by law, to— 

(1) permit an individual to determine what records pertaining to him arc 
collected, maintained, used, or disseminated by such agencies; 

(2) permit an individual to prevent records pertaining to him obtained by such 
agencies for a particular purpose from being used or made available for another 
purpose without his consent; 

(3) permit an individual to gain access to information pertaining to him in 
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Federal agency records, to have a copy made of all or any portion ftimof, and to 
correct or amend such records; 

(4) collect, maintain, use, or disseminate any record of identifiable personal 
information in a manner that assures that such action is for a necessary and 
lawful purpose, that the informatioa is current and accurate for its intended use, 
and that adequate safeguards are provided to prevent misuse of such informa- 
tion; 

(5) permit exemptions from the requirements with respect to records provided 
in this Act only in those cases where there is an important public policy need for 
such exemption as has been determined by specific statutory authority; and 

(6) be subject to civil suit for any damages which occur as a result of willful 
or intentional action which violates any individual^ rights under tihis Act, 

Sic, 3, Title 5, United States Code, is amended by adding after section 552 the 
following new sect on: 

"§ 552a, Records maintained on individuals 
"(a) DEiwiriom— For purposes of this section— 

"(1) the term -agency 9 means agency as defined in section 552 (e) of this 
title; 

"(2) the term 'individual means a citizens of the United States or an alien 
lawfully admitted for permanent residence; 

"(3) the term 'maintain' includes maintain, collect, use, or disseminate; 

"(4) the term 'record 1 means any item, collection, or grouping of information 
about an individual that is maintained by an agency, including, bat not limited 
to, his education, financial transactions, medical history, and criminal or em- 
ployment history and that contains his name, or the identifying number, symbol, 
or other identifying particular assigned to the individual, such as a finger or voice 
print or a photograph; 

"(5) the term 'system of records 9 means a group of any records under the 
control of any agency from which Information is retrieved by the name of the 
individual or by some identifying number, symbol, or other identifying particular 
assigpied to the individual; 

"(6) the term 'statistical record* means a record in a system of records main- 
tained for statistical research or reporting purposes only and not used in whole 
or in part in making any determination about an identifiable individual, except as 
provided by section 8 of tide 13; and 

"(7) the term 'routine use 1 means, with respect to the disclosure of a record, 
for a purpose which is compatible with the purpose for which it was collected, 

**(fc) Conditions op Disclosure,— No agenoy shall disclose any record which 
is contained in a system of records by any means of communication to any person, 
or to another agency, except pursuant to a written request by ? or with the prior 
written consent of, the individual to whom the record pertains, unless disclosure of 
the record would be— 
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"(1) to those officers and employees of the agency whic h maintains the record 
who have a need for the record in the performance of their duties; 

"(2) required under section 552 of this title; 

"(3) for a routine use as defined in subsection (a) (7) of this section and de- 
cribcd under subsection (e) (4) (D) of this section; 

"(4) to the Bureau of the Census for purposes of planning or carrying out a 
census or survey or related activity pursuant to the provisions of title 13; 

"(5) to a recipient who has provided the agency with advance adequate 
written assurance that the record will be used solely as a statistical research or 
repcrang record, and the record is to be transferred in a form that is not indi- 
vy Hilly identifiable; 

' (6) to the National Archives of the United States as a record which has 
efficient historical or other value to warrant its continued preservation by the 
United States' Government or for evaluation of the Administration of General 
Services or his designee to determine whether the record has such value; 

11 (7 ) to another agency or to an instrumentality of any governmental Juris- 
diction within or under the control of the United States for a civil or criminal 
law enforcement vmHvifv if the activity is authorised by law, and if the head of 
the agency or bmr<mit£t&%kiy im wade a written request to the agency which 
maiiitJis the record specifying the particular portion desired and the law en- 
forcement activity for wbfeh the record is sought; 

"(8) to a person pursuant to a showing of compelling circumstances affecting 
the health or safety of an individual if upon such disclosure notification is trans- 
mitted to the last known address of such individual; 

"(9) to either House of Congress, or, to the extent of matter within its 
jurisdictions any committee or subcommittee thereof, any joint committee of 
Congress or subcommittee of any such joint committee; 

"(10) tD the Comptroller General, or any of his authorized representatives, in 
the course of performance of the duties of the General Accounting Office; or 

"(11) pursuant to the order of a court of competent jurisdiction, 
"(c) Accounting op Certain Disclosures*— Each agency, with respect to 
each system of records under its control, shall— 

M (l) except for disclosures wade under subsections (b) ( 1 ) or (b) (2) of 
this section, keep an accurate accounting of — 

M (A) the date, nature, arid purpose of each disclosure of a record to any 

person or to another agency made under subsection (b) of this section; and 

U (B) the name and address of the person or agency to whom cBsetoiure 
is made; 

"(2) retain the accounting made under paragraph ( 1 ) of this subsection for at 
least five years or the life of the record, whichever is longer, after the disclosure 
for which the accounting is made; 
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"(3) except for disclosures made under subsection (b) (7) of this section, 
make the accounting made under paragraph ( 1 ) of this subsection available to 
the individual named in the record at his request; and 

"(4) inform any person or other agency about any correction or notation of 
dispute made by the agency in accordance with subsection (d) of thii section of 
any record that has been disclosed to the person or agency if an accounting of 
the disclosure was made. 

"(d) Access to Records, — Bach agency that maintains a system of records 
shall— 



Personal 



AmeodsiRt 
request. 



"(1) upon request by any Individual to gain access to his record or to any in- 
formation pertaining to him which is contained in the system, permit him and 
upon his request, a person of his own choosing to accompany him, to review the 
record and have a copy made of all or any portion thereof in a form comprehen- 
sible to Mm s except thatthe agency may require the individual to furnish a written 
statement authorizing discussion of that individual's record in the accompanying 
person f s presence; 

"(2) permit the individual to request amendment of a record pertaining to 
him and— 

U (A) not later than 10 days (excluding Saturdays ? Sundays, and legal 
public holidays) after the date of receipt of such request acknowledge in 
writing such receipt; and 
"(B) promptly, either— 

!4 (i) make any correction of any portion thereof which the individual be- 
lieves is not accurate, relevant^ t!rnely s or complete; or 

"(ii) inform the individual of its refusal to amend the record in accordance 
mih his request, the reason for the refusal, the procedures established by 
the agency for the individual to request a review of that refusal by tie 
head of the agency or an officer designated by the head of the agency, and 
the name and business address of that official; 

"(3) permit the Individual who disagrees with the refusal of the agency to 
amend his record to request a review of such refusal, and not later than 30 days 
(excluding Saturdays, Sundays, and legal public holidays) from the date on 
which the individual requests such review, complete such review, and make a 
final determination unless, for good cause shown, the head of the agency extends 
such 30-day period; and if, after his review, the reviewing official also refuses 
to amend the record in accordance with the request, permit the individual to file 
with the agency a concise statement setting forth the reasons for his disagreement 
with the refusal of the agency, and notify the individual of the provisions for 
judicial review of the reviewing officiars determination under subsection (g) (1) 
(A) of this section; 

"(4) in any disclosure, containing information about which the individual has Notation of 
filed a statement of disagreement, occurring after the filing of the statement under 
paragraph (3) of the su Section, clearly note any portion of the record which is 



dispute. 
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fn Federal 
Register, 



disputed and provide copies of the statement and, it ♦he agency deems it ap- 
propriate, copies of a concise statement of the reasons of the agency for noi 
making the amendments requested, to persons or other agencies to whom the 
disputed record has been disclosed; and 

M (5) nothing in this section shall allow an individual access to any informa- 
tion compiled in reasonable anticipation of a civil action or proceeding. 

"(e) Agency Requirements,— Each agency that maintains a system of records 
shall— 

"(I) maintain in its records only such information about an individual as is 
relevant and necessary to accomplish a purpose of the agency required to be ac- 
complished by statute or by executive order of the President; 

"(2) collect information to the greatest extent practicable directly from the 
subject individual when the information may result in adverse determinations 
about an individual's rights, benefits, and privileges under Federal programs; 

"(3) inform each individual whom it asks to supply infonnation, on the form 
which it uses to collect the information or on a separate form that can be retained 
by the individual— 

**(A) the authority (whether granted by statute, or by executive statute, or 
by executive order of the President) which authorizes the solicitation of the 
information and whether disclosure of such information is mandatory or 
voluntary; 

"(B) the principal purposes for which the information is intended to be 
used; 

"(C) the routine uses which may be made of the information, as published 
pursuant to paragraph (4) (D) of this subsection; and 

M (D) the effects on him, if any, of not providing all or any part of the re- 
quested information; 

**(4) subject to the provisions of paragraph (11) of this subsection, publish 
in the Federal Register at least annually a notice of the existence and character 
of the system of records, which notice shall include— 
64 (A) the name and location of the system; 

"(B) the categories of individuals on whom records are maintained in the 
system; . 

"(C) the categories of records maintained in the system; 

"(D) each routine use of the records contained in the system, including 
the categories of users and the purpose of such use; 

"(E) the policies and practices of the agency regarding storage, re- 
tricvability, access controls, retention, and disposal of the records; 

"(F) the title and business address of the agency official who is responsible 
for the system of records; 

11 (G) the agency procedures whereby an individual can be notified at his 
request if the system of records contains a record pertaining to him; 
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"(H) the agency procedures whereby an individual can be notified at his 
request how he can gain access to any record pertaining to him contained in 
the system of records, and how he can contest its content; and 

U (I) the categories of sources of records In the system; 
"(5) maintain all records which are used by the agency in making any de- 
termination about any individual with such accuracy, relevance, timeliness, and 
completeness as is reasonably necessary to assure fairness to the Individual in 
the determination; 

"(6) prior to disseminating any record about an individual to any person other 
than an agency, unless the dissemination is made pursuant to subsection (b) (2) 
of this section, make reasonable efforts to assure that such records are accurate, 
complete, timely, and relevant for agency purposes; 

"(7) maintain no record describing how any individual exercises rights 
guaranteed by the First Amendment unless expressly authorized by statute or by 
the individual about whom the record is maintained or unless pertinent to and 
within the scope of an authorized law enforcement activity; 

"(8) make reasonable efforts to serve notice on an individual when any record 
on such individual is made available to any person under compulsory legal pro- 
cess when such process becomes a matter of public record; 

"(9) establish rules of conduct for persons involved in the design, develop- 
ment, operation, or maintenance of any system of records, or in maintaining any 
record, and instruct each such person with respect to such rules and the require- 
ments of this section, including any other rules and procedures adopted pursuant 
to this section and the penalties for noncompliance; 

"(10) establish appropriate administrative, technical, and physical safeguards 
to insure the security and confidentiality of records and to protect against any 
anticipated threats or hazards to their security or integrity which could result in 
substantial harm, embarrassment, inconvenience, or unfairness to any individual 
on whom Information is maintained; and 

"(11) at least 30 days prior to publication of information under paragraph (4) 
(D) of this subsection, publish in the Federal Register notice of any new use or 
intended use of the information in the system, and provide an opportunity for 
interested persons to submit written' data, views, or arguments to the agency* 
"(f) Agency Rules,— In order to carry out the provisions of this section, each 
agency that maintains a system of records shall promulgate rules, In accordance 
with the requirements (Including general notice) of section 553 of this title, which 
shall— 

"( 1 ) establish procedures whereby an individual can be notified in response to 
his request if any system of records named by the Individual contains a record 
pertaining to him; 

"(2) define reasonable times, places, and requirements for Identifying an In- 
dividual who requests his record or information pertaining to him before the 
agency shall make the record or information available to the Individual; 
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"(3) establish procedures for the disclosure to an individual upon his request 
of his record or information pertaining to him, including special procedure, if 
deemed necessary, for the disclosure to an individual of medical records, includ- 
ing psychological records, pertaining to him; 

"(4) establish procedures for reviewing a request from an individual concern- 
ing the amendment of any record or information pertaining to the individual, for 
making a determination on the request, for an appeal within the agency of an 
initial adverse agency determination, and for whatever additional means may be 
necessary for each Individual to be able to exercise fully his rights under this 
section: and 

"(5) establish fees to be charged, if any, to any individual for making copies 
of his record, excluding the cost of any search for and review of the record. 
The Office of the Federal Register shall annually compile and publish the rules 
promulgated under this subsection and agency notices published under subsection 
(e) (4) of this section in a form available to the public at low cost. 
M (g) (1) Civil R&medies,— Whenever any agency 

"(A) makes a determination under subsection (d) (3) of this section not to 
amend an individual's record in accordance with his request, or fails to make 
such review in conformity with that subsection; 

"(B) refuses to comply with an individual request under subsection (d) (1) 
of this section; 

"(C) fails to maintain any record concerning any individual with such ac- 
curacy, relevance, timeliness, and completeness as is necessary to assure fairness 
in any determination relating to the qualifications, character, rights, or opportuni- 
ties of, or benefits to the individual that may be made on the basis of such record, 
and consequently a determination is made which is adverse to the individual; or 

"(D) fails to cornply with any other provision of this section, or any rule 
promulgated thereunder, in such a way as to have an adverse effect on an in- 
dividual, 

the individual may bring a civil action against the agency, and the district courts 
of the United States shall have jurisdiction in the matters under the provisions of 
this subsection. 

"(2) (A) In any suit brought under the provisions of subsection (g) (1) (A) 
of this section, the court may order the agency to amend the individual's record in 
accordance with his request or in such oth^r way as the court may direct, In such a 
case the court shall determine the matter de novo. 

"(B) The court may assess against the United States reasonable attorney fees 
and other litigation costs reasonably incurred in any case under this paragraph in 
which the complainant has substantially prevailed, 

"(3) (A) In any suit brought under the provisions of subsection (g) (1) (B) 
of this section, the court may enjoin the agency from withholding the records and 
order the production to the complainant of any agency records improperly with- 
held from him, In such a case the court shall determine the matter de novo, and 
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may examine the contents of any agency records in camera to determine whether 
the records or any portion thereof may be withheld under my of the exemptions 
set forth in subsection (k) of this section, and the burden is on the agency to sustain 
its action. 

"(B) Hie court may asses against the United States reasonable attorney fees 
and other litigation cost reasonably incurred in any case under this paragraph in 
which the complainant has substantially prevailed, 

"(4) In any suit brought under the provisions of subsection (g) (1) (C) or (D) 
of this section in which the court determines that the agency acted in a manner 
which was intentional or willful, the United States shall be liable to the individual 
in an amount equal to the sum of— 

"(A) actual damages sustained by the individual as a result of the refusal or 
failure, but in no case shall a person entitled to recovery receive less than the 
sum of $1,000; and 

"(B) the costs of the action together with reasonable attorney fees as de- 
termined by the court. 

M (S) An action to enforce any liability created under this section may be brought 
in the district court of the United States in the district in which the complainant 
resides, or has his principal place of business, or in which the agency records are 
situated, or in the District of Columbia, without regard to the amount in contro- 
versy, within two years from the date on which the cause of action arises, except 
that where an agency has materially and willfully misrepresented any information 
required under this section to be disclosed to an individual and the information so 
misrepresented is material to establishment of the liability of the agency to the in- 
dividual under this section, the action may be brought at any time within two years 
after discovery by the individual of the misrepresentation. Nothing in this section 
shall be construed to authorize any civil action by reason of any injury sustained as 
the result of a disclosure of a record prior to the effective date of this section, 

"(h) Rights op Legal Guardians,— For the purposes of this section, the 
parent of any minor, or the legal guardian of any individual who has been declared 
to be incompetent due to physical, or mental incapacity or age by a court of com- 
petent jurisdiction, may act on behalf of the individual 

"(i) (1) Criminal Penalties,— Any officer or employee of an agency, who 
by virtue of his employment or official position, has possession of, or access to, 
agency records which contain individually identifiable information the disclosure of 
which is prohibited by this section or by rules or regulations established thereunder, 
and who knowing that disclosure of the specific material is so prohibited, willfully 
discloses the material in any manner to any person or agency not entitled to receive 
it, shall be guilty of a misdemeanor and fined not more than $5,000* 

"(2) Any officer or employee of any agency who willfully maintains a system 
of records without meeting the notice requirements of subsection (e) (4) of this 
section shall be guilty of a misdemeanor and fiivBd not more than $5,000. 

M (3) Any person who knowingly and willfully requests or obtains any record 
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concerning an individual from an agency under false pretenses shall be guilty of a 
misdemeanor and fined not more than $5,000, 

General Exemptions*— The head of any agency may premulpte rules, 
in accordance with the requirements (including general notice) of sections 553 (b) 

(1) , (2), and (3), (c), and (c) of this title, to exempt any system of records with- 
in the agency from any part of this section except subsections (b), (c) (1) and 

(2) , (e) (4) (A) through (F), (e) (6), (7), (9), (10) (11), and (i) If the system 
of records is— 

''(I } maintained by the Central Intelligence Agency; or 

iS (2) maintained by an v or component thereof which performs as its 
principal function any activity ^rtaining to the enforcement of criminal laws, 
including police efforts to prevent, control, or reduce crime or to apprehend 
criminals, and the activities of prosecutors, courts, correctional, probation, 
pardon, or parole authorities, and which consists of (A) information compiled 
for the purpose of identifying individual criminal offenders and alleged offenders 
and consisting only of identifying data and notations of arrests, the nature and 
disposition of criminal charges, sentencing, confinement, release, and parole and 
probation status; (B) information compiled for the purpose of a criminal in- 
vestigation, including reports of informants and investigators, and associated with 
an identifiable individual; or (C) reports identifiable to an individual compiled 
at any stage of the process of enforcement of the criminal laws from arrest or 
indictment through release from supervision. 

At the time rules are adopted under this subsection, the agency shall include in 
the statement required under section 553 (c) of this title, the reasons why the 
system of records is to be exempted from a provision of this section, 

"(K) Specific ExEMPTiONS,™The head of any agency may promulgate rules, 
in accordance with the requirements (including general notice) of sections 553 (b) 
(1), (2), and (3), (c), and (e) of this title, to exempt any system of records 
within the agency from subsections (e) (3), (d), (e) (1), (e) (4) (G), 
(H), and (I) and (f) of this section if the system of records is~ 

"(1) subject to the provisions of section 552 (b) (1) of this title; 
"(2) investigatory material compiled for law enforcement purposes, other than 
material within the scope of subsection (j) (2) of this section: Provided, how* 
ever, That if any individual is denied any right, privilege, or benefit that he would 
otherwise be entitled by Federal law, or for which he would otherwise be eligible, 
as a result of the maintenance of such material, such material shall be provided 
to such individual, except to the extent that the disclosure of such material would 
reveal the identity of a source who furnished information to the Government un- 
der an express promise that the identity of the source would be held hi confidence, 
or, prior to the effective date of this section, under an implied promise that the 
identity of the source would be held in confidence; 

"(3) maintained in connection with providing protective services to the Presi- 
dent of the United States or other individuals pursuant to section 3056 of title 18; 
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"(4) required by statute to be maintained and used solely as statistical re- 
cords; 

* 4 (5) investigatory material compiled solely for the purpose of determining 
suitability, eligibility, or qualifications tor Federal civilian employment, militafy 
service, Federal contracts, or access to classified information, but only to flit 
extent that the disclosure of such material would reveal the identity of a source 
who furnished information to the Government under an express promise that 
the identity of the source would be held in confidence, or* prior to the effective 
date of this section, under an implied promise that the identity of the source 
would be held in confidence; 

"(6) testing or examination material used solely to determine individual quali- 
fications for appointment or promotion in the Federal service the disclosure of 
which would compromise the objectivity or fairness of the testing or examination 
process; or 

"(7) evaluation material used to determine potential for promotion in the 
armed services, but only to the extent that the disclosure of such material would 
reveal the identity of a source who furnished information to the Government 
under express promise that the identity of the source would be held in confidence, 
or, prior to the effective date of this section, under an implied promise that the 
identity of the source would be held in confidence. 
At the time rules are adopted under this subsection, the agency tihall include in the 
statement required under section 553 (c) of this title, the reasons why the system 
of records is to be exempted from a provision of this section, 

"(1) (1) Archival Records.— Each agency record which is accepted t;7 toe 
Administrator of General Services for storage, processing, and servicing in ic- 
eordance with section 3103 of title 44 shall, for the purposes of this section, be 
considered to be maintained by the agency which deposited the record and shall be 
subject to the provisions of this section. The Administrator of General Services shaU 
not disclose the record except to the agency which maintains the word, or under 
rules established by that agency which are not inconsistent with the provisions of 
this section, 

"(2) Each agency record pertaining to an identifiable individual which was 
transferred to the National Archives of the United States as a record which has 
sufficient historical or other value to warrant its continued preservation by the 
United States Government, prior to the effective date of this section, shall, for the 
purposes of this section, be considered to be maintained by the National Archives 
and shall not be subject to the provisions of this section, except that a statement p^^ml 
generally describing such records (modeled after the requirements relating to re~ 
cords subject to subsections (e) (4) (A) through (G) of this section) shall be 
published in the Federal Register, 

if (3) Each agency record pertaining to an identifiable individual which is trans- 
ferred to the National Archives of the United States as a record which has sufficient 
historical or other value to warrant its continued preservation by the United States . 
Government, on or after the effective date of this section, shall, for the purposes of 
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this section, be considered to be maintained by the National Archives and M be 
exempt from the requirements of this section except subsections (e) (4) (A) 
through (0) and (e) (9) of this section 

"(m) Government CoNTiucTORS^When an agency provides by a contract 
for the operation by or on behalf of the agency of a system of records to accomplish 
an eg eney function, the agency shall, consistent with its authority, cause the re- 
quirements of this section to be applied to such system, For purposes of subsection 
(i) of this section any such contractor and any employee of such contractor, if such 
contract is agreed to on or after the effective date of this section, shall be considered 
to be an employee of an agency, 

"(n) Mailing Lists,— An individiiars name and address may ^pt be sold or 
rented by an agency unless such action is specifically authorized by law. This pro- 
vision shall not be construed to require the withholding of names and addresses 
otherwise permitted to be made public, 

"(q) Report on New Systems— Each apney shall provide adequate advance 
notice to Congress and tha Office of Management and Budget of any proposal to 
establish or alter any system of records in order to permit an evaluation of the 
probable or potential effect of such proposal pn the privacy and other personal or 
property rights of individuals or the disclosure of infoiTnation relating to such indi- 
viduals, and its effect on the preservation of the constitutional principles of fe- 
deralism and separation of powers, 

"(p) Annual Ripqrt,— The President shall submit to the Speaker of the House 
and the President of the Senate, by June 30 of each calendar year, a consolidated 
report, separately listing for each Federal agency the number of records contained in 
any system of records which were exempted from the application qt this section un- 
der the provisions of subsections (j) and (k) of this section during the preceding 
?-'^4fir year, and the reasons for the exemptions, and such other information as 
?. -v: v efforts to administer fully this section, 

I "mcT of Other Laws^Ng apney shall rely on any examination con- 
tamed fa section 552 of this title to withhold from an individual any record which 
is otherwise accessible to such individual under the provisions of this section/* 

Sic, 4. The chapter analysis of chapter 5 of title 5, United States Code, is 
amended by inserting; 

"5$2m t Records about individuals." 

immediately below: 

"552, Public information; agency rulig* opinions, orders, and proceedings*. 

Sic, 1 (a) (1) There is established a Privacy Protection Study Commission 
(hereinafter referred to as the "Commission") which shall be composed of seven 
members as follow: 

(A) three appointed by the President of the United Spates, 

(B) two appointed by the President of the Senate, and 

(C) two appointed by the Speaker of the House of Representatives, 
Members of the Commission shall be chosen from among persons who, by reason 
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of their knowledge and expertise in any of the following areas—civil rights and 
liberties, law, social sciences, computer technology business, records management, 
and State and local government— are well qualified for service on the Commission. 

(2) The members of the Commission shall elect a Chairman from among them- 
selves. 

(3) Any vacancy in the membership of the Commission, as long as there are 
four members in office, shall not impair the power of the Commission but shall be 
filled in the same manner in which the original appointment was made. 

(4) A quorum of the Commission shall consist of a majority of the members, 
except that the Commission may establish a lower number as a quorum for the 
purpose of taking testimony. The Commission is authorized to establish such 
committees and delegate such authority to them as may be necessary to carry out 
its functions. Each member of the Commission, including the Chairman, shall have 
equal responsibility and authority in all decisions and actions of the Commission, 
shall have full access to all information necessary to the performance of their 
functions, and shall have one vote. Action of the Commission shall be determined 
by a majority vote of the members present The Chairman (or a member designated 
by the Chairman to be acting Chairman) shall be the official spokesman of the 
Commission in its relations with the Congress, Government agencies, other persons, 
and the public, and, on behalf of the Commission, shall see to the faithful execution 
of the administrative policies and decisions of the Commission, and shall report 
thereon to the Commission from time to time or as the Commission may direct, 

(5) (A) Whenever the Commission submit any budget estimate or request 
to the President or the Office of Management and Budget, it shall concurrently 
transmit a copy of that request to Congress, 

(B) Whenever the Commission submits any legislative recommendations, or 
testimony, or comments on legislation to the President or Office of Management 
and Budget, it shall concurrently transmit a copy thereof to the Congress, No officer 
or agency of the United States shall have any authority to require thf; Commission 
to submit its legislative recommendations, or testimony, or comments .<* \ Mation, 
to any officer or agency of the United States for approval, comment^ iw review, 
prior to the submission of such recommendations, testimony, or comments to the 
rtss, 

(b) The Commission shall — 

(1) make a study of the data banks, automated data processing programs, 
and information systems of governmental, regional, and private organizations, 
in order to determine the standards and procedures in force for the protection 
of personal information; and 

(2) recommend to the President and the Congress the extent, if any, to 
which the requirements and principles of section 552a of title 5, United States 
Code, should be applied to the information practices of those organizations by 
legislation, administrative action, or voluntary adoption of such requirements 
and principles, and report on such other legislative recommendations as it may 



Budget 



178 



173 



nembers and shall select a chairman from among its members and a secretary 
i need not be a member of the commission. 

. It shall be the duty of said commission to study the methods by which the 
t of privacy may be invaded and the extent thereof, to investigate such invasions 
privacy, to evaluate the justifications of such invasions, to determine the 
*ssity for corrective action, and to make recommendations for protective 
isures and legislation as it deems desirable and appropriate, 
> The commission shall be entitled to call to its assistance and avail itself of 
services of such employees of any State, county or municipal department, 
rd, bureau, commission or agency as it may require and as may be available 
t for said purpose, and to employ counsel and such stenographic and clerical 
slants and incur such traveling and other miscellaneous expenses as it may 
m necessary, in order to perform its duties, and as may be within the limits 
unds appopriated or otherwise made available to it for said purposes. 
, The commission may meet and hold hearings at such place or places as it 
11 designate during the sessions or recesses of the Legislature and shall report 
hidings and recommendations to the Legislature, accompany the same with any 
slative bills which it may desire to recommend for adoption by the Legislature. 

STATEMENT 

'he purpose of this resolution is to create a commission which shall study and 
:e recommendations concerning the invasion of personal p ivacy and recom- 
id protective measures for the increasing encroachment in our society upon the 
acy of the individual. 
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An Act 

ENROLLED HOUSE BILL NO* 1652 

BY: MONKS and WILLIAMS of the House and PIERCE and FUNSTON of 
flit Senate 

AN ACT RELATING TO STATE GOVERNMENT^ PROHIBITING THE USE 
OF SOCIAL SECURITY NUMBERS BY STATE AGENCIES, BOARDS, 
COftEfeOSSIONS OR OTHER SUBDIVISIONS OF STATE GOVERNMENT^ 
PROVIDING CERTAIN EXEMPTIONS; PROHIBITING DISCLOSURE OF 
INFORMATION INDEXED BY SOCIAL SECURITY NUMBERS; AND 
PROHIBITING TOE REQUIRING OF DISCLOSURE OF ONE^S SOCIAL 
SECURITY NUMBER FOR TOE ISSUANCE OF LICENSES BY THE DE« 
PARTMENT OF PUBLIC SAFETY, 

Be it enacted by the people of the State of Oklahoma: 

SECTION 1* No state agency, board, commission or other unit or subdivision 
of state government shall request or require that any person reveal his social 
security number in order to obtain services or assistance* nor shall any state agency, 
board, commission or other unit or subdivision of state government use, for any 
purpose, numbers which correspond to the social security number of any person. 
Provided that any state agency, board, commissions unit or subdivision of state 
government using social security numbers for a particular purpose prior to January 
1, 1974, may continue to use and require social security numbers for that purpose 
only and provided, further, that the provisions of this act shall not be construed to 
prohibit the use or requirement of disclosure of one's social security number if the 
use of the number is related to the Social Security Administration or benefits 
thereunder, 

SECTION 2, The Oklahoma Department of Public Safety shall not deny or 
refuse to issue any license because of the failure of any person to disclose his 
social security number upon application for or renewal of such license and the 
Department shall not indicate in any manner that the furnishing of such number 
is mandatory or required for the issuance of such license or any renewal thereof, 

SECTION 3* No state agency, board, commission or other unit or subdivision 
of state government may furnish any information indexed by social security 
number unless required by law or specifically authorized to do so by the holder 
of said social security number. Provided that this section shall not apply to a 
report produced by a state agency uf monetary payments made to any state 
official or employee from State Treasury funds or accounts, 

Sfgnr * into law 3 May 1974, 
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PUBLIC LAW 93 579 
93RD CONGRESS, S, 3418 

December 31, 1974 
AN ACT 

To amend title B f United States Code § hf adding a section SS2a to safeguard ta« 
dividual privacy from the misuse of F^Mml re^ordi, to provide that individuals 
be granted access to records coneeT^tag Oitm wMefc m$ maintained by Federal 
agencies, to establish a Privscy Pm§m$®m Stydy Commission* and for other 
purposes. 

Be it enacted by the Senate and Hou±<i of RepiZjmfaiives of the United States 
of America in Congress assembled, The a Cm Act may be cited as the "Privacy Act 
of 1974", 

Sec, 2, (a) The Congress finds that 

(1) the privacy of an individual is directfy effected by the enlleefe^ main- 
tenancej use, and dissemination of personal information fay Federal agsndes; 

(2) the increasing use of eompnters and sophisticated inforniasion techoofogy, 
while essential to the efficient operations of the Government, has great!) Mag- 
nified the ham to individual privacy £hat can occur from any eonectioiij main- 
tenance, use, or dissemination of personal information* 

(3) the opportunities for am individual to secure employment insurance, and 
credit, and his right to due process, and otter legal protections are endangered 
by the misuse of certain information systems; 

(4) the right to privacy is a personal and fundamental right protected by the 
Constitution of the United States; end 

(5) in order to protect the privacy of individuals identified in information 
systems maintained by Federal agencies, it is necessary and proper for the Con- 
gress to regulate the collection, maintenance, use, and dissemination of informa- 
tion by such agencies, 

(b) The purpose of this Act is to provide certain safeguards for an individual 
against an invasion of personal privacy by requiring Federal agencies, except as 
otherwise provided by law, to — 

(1) permit an individual to determine what records pertaining to him are 
collected, maintained, used, or disseminated by such agencies; 

(2) permit an individual to prevent records pertaining to him obtained by such 
agencies for a particular purpose from being used or made available for another 
purpose without his consent; 

(3) permit an individual to gain access to information pertaining to him in 



162 



1 



ERLC 



Federal agency records, to have a copy made of all or any portion thereof, and to 
correct or amend such records; 

(4) collect, maintain, use, or disseminate any record of identifiable personal 
information in a manner that assures that such action is for a necessary and 
lawful purpose, that the Information is current and accurate for its intended use, 
and that adequzlc safeguards are provided to prevent misuse of such informa- 
tion; 

(5) permit exemptions from the requirements with respect to records provided 
in this Act only in those cases where there is an important public policy need for 
such exemption as has been determined by specific statutory authority; and 

(6) be subjec* to civil suit for any damages which occur as a - -ilt of willful 
or intentional action which violates any individual's rights undo, as Act, 

Sec. 3, Title 5, United States Code, is amended by adding after section 552 the 
following new section: 

"§ 552a, Records maintained on individuals 
"(a) Definitions, — For purposes of this section— 

"(I) the term 'agency* means agency as defined in section 552 (e) of this 
title; 

"(2) the term individual means a citizens of the United States or an alien 
lawfully admitted for permanent residence; 

"(3) the term 'maintain' includes maintain, collect, use, or disseminate; 

#4 (4) the term 'record* means any item, collection, or grouping of information 
about an individual that is maintained by an agency* including, but not limited 
to, his education, financial transactions, medical history, and criminal or em- 
ployment history and that contains his name* or the identifying number, symbol, 
or other identifying particular assigned to the individual, such as a finger or voice 
print or a photograph; 

8< (5) the term 'system of records 1 means a group of any records under the 
control of any agency from which information is retrieved by the name of the 
individual or by some identifying number, symbol, or other identifying particular 
assigned to die individual; 

"(6) the term -statistical record' means a record in m system of records main- 
tained for statistical research or reporting purposes only and not used in whole 
or in part in making any determination about an identifiable individual, except as 
provided by section 8 of title 13; and 

"(7) the term 'routine use* means* with respect to the disclosure of a record, 
for a purpose which is compatible with the purpose for which it was collected. 

**(b) Conditions of Disclosure. — No agency shall disclose any record which 
is contained in a system of records by any means of communication to any person, 
or to another agency, except pursuant to a written request by, or with the prior 
written consent of, the individual to whom the record pertains, unless disclosure of 
the record would be— 



168 



"(1 ) to those officers and employees of the agency whkh maintains the record 
who have a need for the record in the performance of their duties; 

"(2) required under section 552 of this title; 

M (3) for a routine use as defined in subsection (a) (7) of this section and de- 
cribed under subsection (e) (4) (D) of this section; 

"(4) to the Bureau of the Census for purposes of planning or carrying out a 
census or survey or related activity pursuant to the provisions of title 13; 

"(5) to a recipient who has provided the agency with advance adequate 
mit*?:?! assurance that the record will be used solely as a statistical research or 
rem rting record, and the record is to be transferred in a form that is not indi- 
* illy identifiable; 

''(6) to the National Archives of the United States as a record which has 
efficient historical or other value to warrant Its continued preservation by the 
United States Government or for evaluation of the Administration of General 
Services or his defignee to determine whether the record has such value; 

"(7) to anothci agency or to an instrumentality of any governmental juris- 
diction within or under the control of the United States for a civil or criminal 
law enforcement «o'*viv if the activity is authorised by law, and if the head of 
the agency or ui"t:«\mep.yftJty has medt a written request to the agency which 
maintains die record specifying the particular portion desired and the Jaw en- 
forcement activity for which the record is sought; 

"(8) to a person pursuant to a showing of compelling circumstances affecting 
the health or safety of an individual if upon such disclosure notification is trans- 
mitted to the last known address of such individual; 

"(9) to either House of Congress, or, to the extent of matter within its 
jurisdiction, any committee or subcommittee thereof, any joint committee of 
Congress or subcommittee of any such joint committee; 

"(10) to the Comptroller General, or any of his authorized representatives, in 
the course of performance of the duties of the General Accounting Office; or 

"(11) pursuant to the order of a court of competent jurisdiction, 
"(c) Accounting of Certain Disclosures,— Each agency, with respect to 
each system of records under its control, shall— 

"(1) except for disclosures made under subsections (b) (1) or (b) (2) of 
this section, keep an accurate accounting of— 

"(A) the date, nature, and purpose of each disclosure of a record to any 

person or to another agency made undsr subsection (b) of this section; and 

"(B) the name and address of the person or agency to whom disclosure 
is made; 

"(2) retain the accounting made under paragraph ( 1 ) of this lubsection for at 
least five years or the life of the record, whichever is longer, after the disclosure 
for which the accounting is made; 
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"(3) except for disclosures made under subsection (b) (7) of this section, 
make the accounting made under paragraph (1) of this subsection available to 
the Individual named in the record at his request; and 

"(4) inform any person or other agency about any correction or notation of 
dispute made by the agency in accordance with subsection (d) of this section of 
any record that has been disclosed to the person or agency if an accounting of 
the disclosure was made. 

41 (d) Access to Records. — Each agency that maintains a system of records 
shall— 

"(1) upon request by any individual to gain access to his record or to any in- 
formation pertaining to him which is contained in the system, permit him and 
upon his request, a person of his own choosing to accompany him, to review the 
record and have a copy made of all or any portion thereof In a form comprehen- 
sible to hin% except that-the agency may require the individual to furnish a written 
statement authorizing discussion of that individual's record in the accompanying 
person's presence; 

44 (2) permit the individual to request amendment of a record pertaining to 
him and — 

"(A) not later than 10 days (excluding Saturdays, Sundays, and legal 
public holidays) after the date of receipt of such request, acknowledge in 
writing such receipt; mid 
U (B) promptly, either— 

"(i) make any correction of any portion thereof which the individual be- 
lieves is not accurate, relevant, timely, or complete; or 
"(H) fnform the individual of its refusal to amend the record in accordance 
vn*b his request, the reason tor the refusal, the procedures established by 
the agency for the individual to acquest a review of that refusal by the 
head of the agency or an nhiui designated by the head of the agency, and 
the name and business address of that official; 

"(3) permit the individual who disagrees with the refusal of the agency to 
amend his record to request a review of such refusal, and not later than 50 days 
(excluding Saturdays, Sundays, and legal public holidays) from the date on 
which the individual requests such review, complete such review, and make a 
final determination unless, for good cause shown y the head of the agency extends 
such 30-day period; and Jf, after his review, the reviewing official also refuses 
to amend the record in accordance with the request, permit the individual to file 
with the agency a concise statement setting forth the reasons for his disagreement 
with the refusal of the agency, and notify the individual of the provisions for 
judicial review of the reviewing official's determination under subsection (g) ( 1 ) 
(A) of this section; 

"(4) in any disclosure, containing information about which the individual has 
filed a statement of disagreement, occurring after the filing of the statement under 
paragraph (3) of the suh^£tion f clearly note any portion of the record which is 



Personal 
review. 



Amendment 
request, 



Review, 



Notation of 
dispute, 



1/0 



165 



disputed and provide copies of the statement and, it he agency deems it ap- 
propriate, copies of a concise statement of the losons oi the agency for not 
making the amendments requested, to persons or other agencies to whom the 
disputed record has been disclosed; and 

"(5) nothing in this section shall allow an individual access to any informa- 
tion compiled in reasonable anticipation of a civil action or proceeding, 

"(e) Agency Requirements,— Each agency that maintains a system of records 
shall— 

44 (1) maintain in its records only such information about an individual as is 
relevant and necessary to accomplish a purpose of the agency required to be ac- 
complished by statute or by executive order of the President; 

"(2) collect information to the greatest extent practicable directly from the 
subject individual when the information may result in adverse determinations 
about an individual's rights, benefits, and privileges under Federal programs; 

"(3) inform each individual whom it asks to supply information, on the form 
which it uses to collect the information or on a separate form that can be retained 
by the individual— 

"(A) the authority (whether granted by statute, or by executive statute, or 
by executive order of the President) which authorizes the solicitation of the 
information and whether disclosure of such information is mandatory or 
voluntary; 

"(B) the principal purposes for which the information is intended to be 
used; 

"(C) the routine uses which may be made of the information, as published 
pursuant to paragraph (4) (D) of this subsection; and 

"(D) the effects on him, if any, of not providing all or any part of the re- 
quested information; 

inVttel 1 ™ "(4) subject to the provisions of paragraph (11) of this subsection, publish 

in the Federal Renter at least annually a notice of the existence and character 
of the system of records, which notice shall include — 
*'(A) the name and location of the system; 

"(B) the categories of individuals on whom records are maintained in the 
system; 

"(C) the categories of records maintained in the system; 

"(D) each routine use of the records contained in the system, including 
the categories of users and the purpose of such use; 

"(E) the policies and practices of the agency regarding storap, re- 
trievability, access controls, retention, and disposal of the records; 

"(F) the title and business address of the agency official who is responsible 
for the system of records; 

"(G) the agency procedures whereby an individual can be notified at his 
request if the system of records contains a record pertaining to him; 
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M (H) the agency procedures whereby an individual can be notified at his 
request how he can gain access to any record pertaining to him contained in 
the system of records, and how he can contest its content; and 

M (I) the categories of sources of records in the system; 
''(5) maintain all records which are used by the agency in making any de- 
termination about any individual with such accuracy, relevance, timeliness, and 
completeness as is reasonably necessary to assure fairness to the individual in 
the determination; 

"(6) prior to disseminating any record about an Individual to any person other 
than an agency, unless the dissemination is made pursuant to subsection (b) (2) 
of this section, make reasonable efforts to assure that such records are accurate, 
complete, timely, and relevant for agency purposes; 

"(7) maintain no record describing how any individual exercises rights 
guaranteed by the First Amendment unless expressly authorized by statute or by 
the individual ahotu whom the record Is maintained or unless pertinent to and 
within the scope of an authorized law enforcement activity; 

"(8) make reasonable efforts to serve notice on an individual when any record 
on such individual is made available to any person under compulsory legal pro- 
cess when such process becomes a matter of public record; 

"(9) establish rules of conduct for persons involved in the design, develop- 
ment, operation, or maintenance of any system of records, or in maintaining any 
record, and instruct each such person with respect to such rules and the require- 
ments of this section, including any other rules and procedures adopteu pursuant 
to this section and the penalties for noncompliance; 

<4 (I0) establish appropriate administrative, technical, and physical safeguards 
to insure the security and confidentiality of records and to protect against any 
anticipated threats or hazards to their security or integrity which could result in 
substantial harm, embarrassment, inconvenience, or unfairness to any individual 
on whom Information Is maintained; and 

"(11) at least 30 days prior to publication of information under paragraph (4) 
(D) of this subsection, publish in the Federal Register notice of any new use or 
intended use of the information in the system, and provide an opportunity for 
interested persons to submit written data, views, or arguments to the agency. 
"(f) Agency Rules,— In order to carry out the provisions of this section, each 
agency that maintains a system of records shall promulgate rules, in accordance 
with the requirements (including general notice) of section 553 of this title, which 
shall— 

"(1) establish procedures whereby an individual can be notified in response to 
his request if any system of records named by the individual contains a record 
pertaining to him; 

"(2) define reasonable times, places, and requirements for Identifying an in- 
dividual who requests his record or information pertaining to him before the 
agency shall make the record or information available to the individual; 
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"(3) establish procedures for the disclosure to an individual upon his request 
of his record or information pertaining to him, including special procedure, if 
deemed necessary, for the disclosure to an individual of medical records, includ- 
ing psychological records, pertaining to him; 

"(4) establish procedures for reviewing a request from an individual concern- 
ing the amendment of any record or information pertaining to the individual, for 
making a determination on the request, for an appeal within the agency of an 
initial adverse agency determination, and for whatever additional means may be 
necessary for each individual to be able to exercise fully his rights under this 
section: and 

"(5) establish fees to be charged, if any, to any individual for making copies 
of his record, excluding the cosfof any search for and review of the record, 
The Office of the Federal Register shall annually compile and publish the rules 
promulgated under this subsection and agency notices published under ubsection 
(e) (4) of this section in a form available to the public at low cost 
"(g) (I) Civil Remedies. — Whenever any agency 

"(A) makes a determination under subsection (d) (3) of this section not to 
amend an individual's record in accordance with his request, or fails to make 
such review in conformity with that subsection; 

"(B) refuses to comply with an individual request under subsection (d) (1) 
of this section; 

"(C) fails to maintain any record concerning any Individual with such ac- 
curacy, relevance, timeliness, and completeness as is necessary to assure fairness 
in any determination relating to the qualifications, character, rights, or opportuni- 
ties of, or benefits to the individual that may be made oh the basis of such record, 
and consequently a determination is made which is adverse to the individual; or 

"(D) fails to comply with any other provision of this section, or any rule 
promulgated thereunder, in such a way as to have an adverse effect on an in- 
dividual, 

the individual may bring a civil action against the agency, and the district courts 
of the United States shall have jurisdiction in the matters under the provisions of 
this subsection, 

"(2) (A) In any suit brought under the provisions of subsection (g) (1) (A) 
of this section, the court may order the agency to amend the individual's record in 
accordance with his request or in such oth:r way as the court may direct, In such a 
case the court shall determine the matter de novo. 

"(B) The court may assess against the United States reasonable attorney fees 
and other litigation costs reasonably incurred in any case under this paragraph in 
which the complainant has substantially prevailed, 

"(3) (A) In any suit brought under the provisions of subsection (g) (1) (B) 
of this section, the court may enjoin the agency from withholding the records and 
order the production to the complainant of any agency records improperly with- 
held from him, In such a case the court shall determine the matter de novo, and 
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may examine the contents of any agency records in camera to determine whether 
the record! or any portion thereof may be withheld under any of the exemptions 
set forth in subsection (k) of this section, and the burden is on the agency to sustain 
Its action* 

"(B) The court may asses against the United States reasonable attorney fees 
and other litigation cost reasonably Incurred in any case under this paragraph in 
which the complainant has substantially prevailed, 

"(4) In any suit brought under the provisions of subsection (g) (1) (Q or (D) 
of this section in which the court determines that the agency acted In a manner 
which was intentional or willful, the United States shall be liable to the Individual 
in an amount equal to the sum of— 

"(A) actual damages sustained by the individual as a result of the refusal or 

failure, but in no case shall a person entitled to recovery receive less than the 

sum of $1,000; and 

"(B) the costs of the action together with reasonable attorney fees as de- 
termined by the court, 

"(5) An action to enforce any liability created under this section may be brought 
in the district court of the United States in the district in which the complainant 
resides, or has his principal place of business, or in which the agency records are 
situated, or -in the District of Columbia, without regard to the amount in contro- 
versy, within two years from the date on which the cause of action arises, except 
that where an %ency has materially and willfully misrepresented any information 
required under this section to be disclosed to an individual and the information so 
misrepresented is material to establishment of the liability of the agency to the in- 
dividual under this section, the action may be brought at any time within two years 
after discovery by the individual of the misrepresentation. Nothing in this section 
shall be construed to authorize any civil action by reason of any injury sustained as 
the result of a disclosure of a record prior to the effective date of this section, 

"(h) Rights of Legal Guardians,— For the purposes of this section, the 
parent of any minor, or the legal guardian of any individual who has been declared 
to be incompetent due to physical, or mental incapacity or age by a court of com- 
petent Jurisdiction, may act on behalf of the individual 

"(i) (1) Criminal Penalties,— Any officer or employee of an agency, who 
by virtue of his employment or official position, has possession of, or access to, 
agency records which contain individually identifiable information the disclosure of 
which is prohibited by this section or by rules or regulations established thereunder, 
and who knowing that disclosure of the specific material is so prohibited, willfully 
discloses the material in any manner to any person or agency not entitled to receive 
it, shall be guilty of a misdemeanor and fined not more than $5,000, 

"(2) Any officer or employee of any agency who willfully maintains a system 
of records without meeting the notice requiremu ^ of subsection (e) (4) of this 
section shall be guilty of a misdemeanor and fifjrf not more than $5,000, 

"(3) Any person who knowingly and willfully requests or obtains any record 
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concerning an individual from an agency under false pretenses shall be guilty of a 
misdemeanor and fined not more than $5,000, 

<4 (j) General Exemptions,— The head of any agency may promulgate rules* 
in accordance with the requirements (including general notice) of sections 553 (b) 

(1) , (2), and (3), (c), and (e) of this title, to exempt any system of records with- 
in the agency from any pan of this section except subsections (b), (c) (1) and 

(2) , (e) (4) (A) through (F), (e) (6), (7), (9), (10) (11), and (i) if the system 
of records is— 

"(1) maintained by the Central Intelligence Agency; or 
"(2) maintained by an or component thereof which performs as its 

principal function any activity pertaining to the enforcement of criminal laws, 
including police efforts to prevent, control, or reduce crime or to apprehend 
criminals, and the activities of prosecutors, courts, correctional, probation, 
pardon, or parole authorities, and which consists of (A) information compiled 
for the purpose of identifying individual criminal offenders and alleged offenders 
and consisting only of identifying data and notations of arrests, the nature and 
disposition of criminal charges, sentencing, confinement, release, and parole and 
probation status; (B) information compiled for the purpose of a criminal in- 
vestigation, including reports of informants and investigators, and associated with 
an identifiable individual; or (C) reports identifiable to an Individual compiled 
at any stage of the process of enforcement of the criminal laws from arrest or 
indictment through release from supervision. 
At the time rules are adopted under this subsection, the agency shall include In 
the statement required under section 553 (c) of this title, the reasons why the 
system of records is to be exempted from a provision of this section, 

**(K) Specific Exemptions.— The head of any agency may promulgate rules, 
in accordance with the requirements (including genera! notice) of sections 553 (b) 
(1), (2), and (3), (c), and (e) of this title, to exempt any system of records 
within the agency from subsections (c) (3), (d), (e) (1), (e) (4) (G), 
(H), and (I) and (f) of this section if the system of records is— 

4t (l) subject to the provisions of section 552 (b) (1) of this title; 
"(2) investigatory material compiled for law enforcement purposes, other than 
material within the scope of subsection (j) (2) of this section: Provided, how* 
iver, That if any individual is denied any right, privilege, or benefit that he would 
otherwise be entitled by Federal law, or for which he would otherwise be eligible, 
as a result of the maintenance of such material, such material shall be provided 
to such individual, except to the extent that the disclosure of such material would 
reveal the identity of a source who furnished Information to the Government un- 
der an express promise that the identity of the source would be held in confidence, 
or, prior to the effective date of this section, under an implied promise that the 
identity of the source would be held in confidence; 

4< (3) maintained in connection with providing protective services to the Presi- 
dent of the United States or other individuals pursuant to section 3056 of title 18; 
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"(4) required by statute to be maintained and used solely as statistical re- 
cords; 

"(5) investigator material compiled solely for the purpose of determining 
suitability, elipbility, or qualifications for Federal civilian employment, military 
service. Federal contracts, or access to classified information, but only t© the 
extent that the disclosure of such material would reveal the identity of a source 
who furnished information to the Government under an express promise that 
the identity of the source would be held in confidence, or, prior to the effective 
date of this section, under an implied promise that the identity of the source 
would be held in confidence; 

"(6) testing or examination material used solely to determine individual quali- 
fications for appointment or promotion in the Federal service the disclosure of 
which would compromise the objectivity or fairness of the testing or examination 
process; or 

"(7) evaluation material used to determine potential for promotion in the 
armed services, but only to the extent that the disclosure of such material would 
reveal the identity of a source who furnished information to the Government 
under express promise that the identity of the source would be held in confidence, 
or, prior to the effective date of this section, under an implied promise that the 
identity of the source would be held in confidence. 
At the time rules are adopted under this subsection, the agency shall include in the 
statement required under section 553 (c) of this title, the reasons why the system 
of records is to be exempted from a provision of this section, 

"(1) (!) Archival Records,— Each agency record which is accepted b * the 
Administrator of General Services for storage, processing, and servicing in ac- 
cordance with section 3103 of title 44 shall, for the purposes of this section, be 
considered to be maintained by the agency which deposited the record and shall be 
subject to the provisions of this section. The Administrator of General Services shall 
not disclose the record except to th* agency which maintains the record, or under 
rules established by that agency which are not inconsistent with the provisions of 
this section, 

"(2) Each agency record pertaining to an identifiable individual which was 
transferred to the National Archives of the United States as a record which has 
sufficient historical or other value to warrant Its continued preservation by the 
United States Government, prior to the effective date of this section, shall, for the 
purposes of this section, be considered to be maintained by the National Archives 
and shall not be subject to the provisions of this section, except that a statement pmsmim 
generally describing such records (modeled after the requirements relating to re^ JjJ*£» 
cords subject to subsections (e) (4) (A) through (G) of this section) shall be 
published in the Federal Register, 

"(3) Each agency record pertaining to an identifiable individual which is trans- 
ferred to the National Archives of the United States as a record which has sufficient 
historical or other value to warrant its continued preservation by the United States 
Government, on or after the effective date of this section, shall, for the purposes of 
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this section, be considered to be maintained by the National Archives and shall be 
exempt from the requirements of this section except subsections (e) (4) (A) 
through (G) and (e) (9) of this section. 

M (m) Government Contractors.— When an agency provides by a contract 
for the operation by or on behalf of the agency of a system of records to accomplish 
an agency function, the agency shall, consistent with its authority, cause the re- 
quirements of this section to be applied to such system. For purposes of subsection 
(i) of this section any such contractor and any employee of such contractor, if such 
contract is agreed to on or after the effective date of this section, shall be coneMered 
to be an employee of an agency. 

"(n) Mailing Lists,— An individual's name and address may not be sold or 
rented by an agency unless such action Is specifically authorized by law. This pro- 
vision shall not be construed Jo require the withholding of names and addresses 
otherwise permitted to be made public, 

li (o) Report on New Systems.— Each agency shall provide adequate advance 
notice to Congress and the Office of Management and Budget of any proposal to 
establish or alter any system of records in order to permit an evaluation of the 
probable or potential effect of such proposal on the privacy and other personal or 
property rights of individuals or the disclosure of information relating to such indi- 
viduals, and its effect on the preservation of the constitutional principles of fe- 
deralism and separation of powers. 

"(p) Annual Report.— The President shall submit to the Speaker of the House 
and the President of the Senate, by June 30 of each calendar year, a consolidated 
report, separately listing for each Federal agency the number of records contained in 
any system of records which were exempted from the application pf this section un- 
der the provisions of subsections (j) and (k) of this section during the preceding 
r'l- year, and the reasons for the exemptions, and such other information as 

^ fiforts to administer fully this section. 

(<p Effect of Other Laws.— No agency shall rely on any examination con- 
tained in section 552 of this title to withhold from an individual any record which 
is otherwise accessible to such individual under the provisions of this section." 

Sec. 4, The chapter analysis of chapter 5 of title S f United States Code, is 
amended by inserting: 
"552a, Records about Individuals.** 
immediately below: 

"552, Public information; agency rules, opinions, orders, and proceedings*. 

Sec. 5. (a) (1) There is established a Privacy Protection Study Commission 
(hereinafter referred to as the "Commission") which shall be composed of seven 
members as follows" 

(A) three appointed by the President of the United States, 

(B) two appointed by the President of the Senate, and 

(C) two appointed by the Speaker of the House of Representatives, 
Members of the Commission shall be chosen from among persons who, by reason 
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of their knowledge and expertise in any of the ^Slowing areas— civil rights and 
liberties, law, social sciences, computer technology, business, records management 
and State and local government— aie well qualified *nr service on the Commission. 

(2) The members of the Commission shall elect a Chairman from among them- 
selves, 

(3) Any vacancy in the membership of the Commission, as long as there are vacancies, 
four members in office, shall not impair the power of the Commission but shall be 

filled in the same manner In which the original appointment was made* 

(4) A quorum of the Commission shall consist of a majority of the members, 
except that the Commission may establish a lower number as a quorum for the 
purpose of taking testimony. The Commission is authorized to establish such 
committees and delegate such authority to them as may be necessary to carry out 
its functions. Each member of the Commission, including the Chairman, shall have 
e^ual responsibility and authority in all decisions and actions of the Commission, 
shall have full access to ail information necessary to the performance of their 
functions, and shall have one vote. Action of the Commission shall be determined 
by a majority vote of the members present. The Chairman (or a member designated 
by the Chairman to be acting Chairman) shall be the official spokesman of the 
Commission in its relations with the Congress, Government agencies, other persons, 
and the public, and, on behalf of the Commission, shall see to the faithful execution 
of the administrative policies and decisions of the Commission, and shall report 
thereon to the Commission from time to time or as the Commission may direct, 

(5) (A) Whenever the Commission submit any budget estimate or request JJJJJ^ 
to the President or the Office of Management and Budget, it shall concurrently 
transmit a copy of that request to Congress. 

(B) Whenever the Commission submits any legislative recommendations, or Legislative 
testimony, or comments on legislation to the President or Office of Management dations. 
and Budget, it shall concurrently transmit a copy thereof to the Congress. No officer 
or agency of the United States shall have any authority to require tht 'emission 
to submit its legislative recommendations, or testimony, or comments c . filiation, 
to any officer or agency of the United States for approval, comments, or review, 
prior to the submission of such recommendations, testimony, or comments to the 
Congress. 

(b) The Commission shall— 

(1) make a study of the data banks, automated data processing programs, Sludy * 
and information systems of governmental, regional, and private organizations, 

in order to determine the standards and procedures in force for the protection 
of personal information; and 

(2) recommend to the President and the Congress the extent, if any, to 
which the requirements and principles of section 552a of title 5, United State? 
Code, should be applied to the information practices of those organizations by 
legislation, administrative action, or voluntary adoption of such requirements 
and principles, and report on such other legislative recommendations as it may 
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determine to be necessary to protect the privacy of individuals while meeting 
the legitimate needs of government and society for information. 
Co) (1) In the course of conducting the study required under subsection (b) 
(1) of this section, and in its reports thereon, the Commission may research, ex- 
amine, and analyze— 

(A) interstate transfer of information about individuals that is undertaken 
through manual files or by computer or other electronic or telecommunications 
means; 

(B) data banks and information programs and systems the operation of which 
significantly or substantially affect the enjoyment of the privacy and other per- 
sonal and property rights of Individuals; 

(C) the use of social security numbers, license plate numbers, universal 
identifiers, and other symbols to Identify individuals in data banks and to gain 
access to, Integrate, or centralize information systems and files; and 

(D) the' matching and analysis of statistical data, such as Federal census data, 
with other sources of personal data, such as automobile registries and telephone 
directories, in order to reconstruct individual responses to statistical question- 
naires for commercial or other purposes, in a way which results in a violation 
of the implied or explicitly recognized confidentiality of such information, 

(2) (A) The Commission may include in its examination personal information 
activities in the following areas: medical; insurance; education; employment and 
personnel; credit, banking and financial institutions; wedit bureaus; the commercial 
reporting industry; cable television and other telecommunications media; travel, 
hotel and entertainment reservations; and electronic check processing, 

(B) The Commission shall Include in its examination a study of — 

(1) whether a person engaged in interstate commerce who maintains a mail- 
ing list should be required to remove an individual's imm and address from 
such list upon request of that individual; 

(il) whether the Internal Revenue Service should be prohibited from trans- 
ferlng individually Indentifiable data to other agencies md to agencies of State 
governments; 

(Hi) whether the Federal Government should be liable for general damages 
incurred by an individual as the result of a willful or intentional violation of the 
provisions of sections 552a (g) (1) (O or (D) of title 5, United States Code; 
and 

(iv) whether and how the standards for security and confidentiality of records 
required under section 555a (c) (10) of such title should be applied when a re- 
cord is disclosed to a person other than an agency* 

(C) The Commission may study such other personal information activities neces- 
sary to carry out the congressional policy embodied in this Act, except that the 
Commission shall not investigate information systems maintained by religious or- 
ganizations, 

(3) In conducting such study, the Commission shall— 
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(A) determine what laws, Executive orders, reguTatfons, directives, and 
judicial decisions govern the activities under study aud the extent to which they 
are consistent with the rights of privacy, due process of Isw, and other guaran- 
tees In the Constitution; 

(B) determine to what extent governmental and private information systems 
affect Federal-State relations or the principle of separation of powers; 

(C) examine the standards and criteria governing programs, policies, and 
practices relating to the collection, soliciting, processing, use, access, integra- 
tion, dissemination, and transmission of personal information; and 

(D) to the maximum extent practicable, collect and utilize findinp, reports, 
studies, hearing transcripts, and recommendations of governmental, legislative 
and private bodies, Institutions, organizations, and individuals which pertain to 
the problems under study by the Commission, 

(d) In addition to its other functions the Commission may — 

(1) request assistance of the heads of appropriate departments, agencies, and 
instrumentalities of the Federal Government, of State and local governments, 
and other persons in carrying out its functions under this Act; 

(2) upon request, assist Federal agencies In complying with the requirements 
of section 552a of title Jnited States Code; 

(3) determine what specific categories of Information, the collection of which 
would violate an Individual's right of privacy, sliculd be prohibited by statute 
from collection by Federal agencies; and 

(4) upon request, prepare model legislation for use by State and local gov- 
ernments in establishing procedures for handling, maintaining, and disseminat- 
ing personal information at the State and local level and provide such technical 
assistance to State and local governments as they may require in the preparation 
and implementation of such legislation, 

(e) (1) The Commission may, in carrying out its functions una, lis section, 
conduct such inspections, sit and act at such times and places, hold such hearings, 
take such testimony, require by subpena the attendance of such witnesses and the 
production of such books, records, papers, correspondence, and documents, ad- 
minister such oaths, have such printing and binding done, and make such ex- 
penditures as the Commission deems advisable, A subpena shall be issued only 
upon an affirmative vote of a majority of all members of the Commission* Subpenas 
shall be issued under the signature of the Chairman or any member of the Com- 
mission designated by the Chairman and shall be served by any person designated 
by the Chairman or any such member. Any member of the Commission may ad- 
minister oaths or affirmations to witnesses appearing before the Commission, 

(2) (A) Each drcHrtment, agency, and instrumentality of the executive branch Report*, 

s r 9 ¥ , transmittal 

of the Governmen , > authorized to furnish to the Commission, upon request made to Commission 
by the Chairman, such information, data, reports and such other assistance as the 
Commission deems necessary to cany out its functions under this section. When- 
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aver the head of any such department, agency, or instrumentality submits a report 
pursuant to section 552a (o) of title 5, United States Code, a copy of such report 
shall be transmitted to the Commission, 

(B) In carrying out its functions and exercising iir ^owers under this section, the 
Commission may accept for many such departme jency, independent instru- 
mentality, or other person any individually indentifiauiu data if such data is neces- 
sary to carry out such powers and functions. In any case in which the Commission 
accepts any such Information, it shall assure that the Information is used only for 
the purpose for which it Is provided, and upon completion of that purpose such 
information shall be destroyed or returned to such department, agency, independent 
instrumentality, or person from which it Is obtained, as appropriate. 

(3) The Commission shall have the power to— 

(A) appoint and fix the compensation of an executive director, and such ad- 
ditional staff personnel as may be necessary, without regard to the provisions 
of title 5, United States Code, governing appointments in the competitive 
service, and without regard to chapter 51 and subchapter III of rfimptrr 53 of 
such title relating to classification and General Schedule pay rates, but A r ites 
not in excess of the maximum rate for GS-I8 of the General Schedule under 

* section 5332 of such title; and 

(B) procure temporary and intermittent services to "the same extent as is 
authorized by section 3109 of title 5, United States Code, 

The Commission may delegate any of its functions to such personnel of the Com- 
mission as the Commission may designate and may authorize such successive re- 
delegations of ih functions as it may deem desirable* 

(4) The O* sslon is authorized— 

(A) t* , nmend, and repeal rules and regulations governing the manner 
of its orations, organization, and personnel; 

(B) to enter into con m or other arrangements or modifications thereof, 
with any government, any department, agency, or independent instrumentality 
of the United States, or with any person, firm, association, or corporation, and 
such contracts or other arrangements, or modifications [hereof, may be entered 
into without legal consideration, without performance or other bonds, and with- 
out regard to section 3709 of the Revised Statutes, as amended (41 U.S.C.5); 

(C) to make advance, progress, and other payments which the Commission 
deems necessary under this Act without regard to the provisions of section 3648 
of the Revised Statutes, as amended (31 U.S.C.529); and 

(D) to take such other action as may be necessary to ca,rry out its functions 
under this section* 

(f) (1) Each [the] member of the Commission who is an officer or employee of 
the United States shall serve without additional compensation, but shall continue to 
receive the salary of his regular position when engaged In the performance of the 
duties vested in the Commission, 
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(2) A member of the Commission other than one to whom paragraph (1) applies Pefdkin - 
shall receive per diem at the maximum daily rate for GS-1 8 of the General Schedule 

when engaged In the actual performance of the duties vested in the Commission, 

(3) All members of the Commission shall be reimbursed for travel, subsistence, r^mi warn. 
and other necessary expenses incurred by them in the performance of the duties 

vested in the Commission* 

(g) The Commission shall, from time to time, and in an annual report, report to 

the President and the Congress on its activities in carrying out the provisions of this and congress, 
section. The Commission shall make a final report to the President and to the Con- 
gress on its findings pursuant to the study required to be made under subsection (b) 
(!) of this section not later than two years from the date on which all of the mem- 
bers of the Commission are appointed. The Commission shall cease to exist thirty 
days after the date on which final report is submitted to the President and the 
Congress* 

(h) (1) Any member, officer, or employee of the Commission, who by virtue of PcnaUiC3 " 
his employment or official position, has possession of, or access to, agency records 

which contain individually identifiable information the disclosure of which is pro- 
hibited by this section, and who knowing that disclosure of the specific material is 
so prohibited, willfully dis poses the material m any manner to any person or agency 
not entitled to receive it, shall be guilty of a n^isdemeanor and fined not more than 
$5,000, 

(2) Any person who knowingly and wfMfully requests or obtains any record con* 
cerning an individual from :he Commission under false pretenses shall be guilty 
of a misdemeanor and fined not more than $5,000, 

Sec, 6. The Office of Management and Budget shall — 

(1) develop guidelines and regulations for the use of agencies in implement- 
ing the provisions of seaion 552a of title 5, United States Code, as idded by 
section 3 of this Act; and 

(2) provide continuing assistance to and oversight of the implementation of 
the provisions of such section by agencies. 

Sic, 7, (a) (1) It shall be unlawful for any Federal, State or local government 
agency to deny to any individual any right, benefit, or privilege provided by law 
because of such individual's refusal to disclose his social security account number. 

(2) the provisions of paragraph ( 1 ) of this subsection shall not apply with respect 
to— 

(A) any disclosure which is required by Federal statute, or 

(B) the disclosure of a social security number to any Federal, State, or local 
agency maintaining a system of records in existence and operating before 
January 1, 1975, if such disclosure was required under statute or regulation 
adopted prior to such date to verify the identity of an individual. 

(b) Any Federal, State, or local government agency which requests an individual 
to disclose his social security account number shall inform that individual whether 
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that disclosure is mandatory or voluntary, by what statutory or other authority such 
number is solicited, and what uses will be made of it. 

Sec, 8* The provisions of this Act shall be effective on and after the data of 
enactment, except that the amendments made by sections 3 and 4 shall become 
effective 270 days following the day on which this Act is enacted, 

Sic, 9, There is authorized to be appropriated to carry out the provisions of 
section 5 of this Act for fiscal years 1975, 1976, and 1977 the sum of $1,500,000, 
except that not more than $750,000 may be expended during any such fiscal year, 

Approved December 31, 1974, 
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The Privacy Act his been a subject of discus- 
sion anc T controversy since its inception in 1974 
hearings before the House Subcommittee on Foreign 
Operations and Government Information It has 
been praised as a major step toward restoring citizen 
confidence In government, as a needed brake on the 
data-gathering appetite of Federal agencies, and as 
a welcome incentive to improve the efficiency of 
Federal agency record-keeping practices, It has been 
denounced as an obstacle to the exposure of ele- 
ments in the society (including miscreant bureau- 
crats whose activities ought not to be shielded 
from public view, as a gratuitous constraint on the 
development of new record-keeping applications of 
computer and telecommunications technology, and 
as an administrative nightmare that promises to dis- 
rupt the normal operations of government and cause 
a permanent hemorrhage in the administrative bud- 
get of the Executive bmnch» 

Despite these sharply contrasting expectations, 
however, both advocates and opponents of the Act 
have recognized from the beginning that its success 
of failure will depend in large measure on the spirit 
and skill with which it m administered, 

When the Privacy Act took effect on September 
27, 1975, the protection of personal privacy and 
the efficient management of government propams 
became inextricably entwined with administrative 
concerns. Line management — that is, agency heads 
and program managers — became directly res- 
ponsible for assuring faithful and effective com- 
pliance with the Act's requirements. Agency 
practices that affect the collection, handling, and 
disclosure of information about individuals are now, 
by and large, a matter of public record. The indi- 
vidual citizen is in most eases guaranteed the right 
to see, challenge, and correct information in a 
record that an agency maintains about him for pro- 
gram purposes. 

From now on agency proposals to establish or 
substantially alter a system of records about in* 

* C&rote W< Parsor^, formerly Associate Executive Deleter of the 
Domestic Council Committee On the Right of Prhmey* £s Bteeutht 
Director of the Privacy Protection Study Commission, 



dividual! will be scrutiniied with a view to striking 
an acceptable balance between management needs 
for recorded personal information and the individual 
citizen's interest in limiting toe content, character, 
and circulation of such information about him. 

To understand tills major shift in Federal policy 
on personal-data record keeping and to compre- 
hend its various practical implications, one must 
bear in mind the intent of the Privacy Act, One 
objective, clearly f is to allay public amriety about 
the possibility of illegal, unauthorized, and surrepti- 
tious disclosures mod exchanges of personal infor- 
mation among Federal agencies themselves and 
between Federal agencies and other types of record- 
keeping organizations at other levels of government 
and in the private sector, 

Another equally dear objetf!v& is to assure res- 
ponsible, fair, safe, and cost-eHceiive use of auto- 
mated information processing technologies in the 
performance ' f personal data record-keeping tunc- . 
tions in government Still another — the one with 
the potential for the most far-reaching consequence 
Lit all — is to induce Federal agencies to behave in 
ways that reassure the individual citizen that the in- 
formation he dis*i0» vbout himself will indeed be 
used in a fair ^-n^, jtecuioas manner, As the now 
familiar HE^k mp&rr ett computers and privacy 
points out it is dma&eterfstic of present day Ameri- 
can society for an individual io be asked to 

give information about himself to large and relatively 
faceless institutions! for handling and use by strangers— 
unknown, unseen and* all too frequently, unresponsive. 
Sometimes the MivMu&l does not even know that an 
organization maintains a record about him. Often he 
may not see It, much less contest its accuracy, control 
its dissemination, or challenge its use by others . . . .* 

This situation, the report suggests, may be the 
principal source of public concern about the pro- 
tection of personal privacy — far more important 
than the seemingly voracious organisational appetite 
for personal information ~ and it is the situation 
to which the Privacy Act is centrally addressed. By 
making the personal data record-keeping functions 

* Rtccrdj, Computers* and ike Rights of CMztns, 9ce appendix V, 
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of government tanpble — that is, open to public 
scrutiny — and by affording the individual an op- 
portunity to affect those functions when he needs 
to do so on his own behalf, the Act, if administered 
in the proper spirit, should go far toward relieving 
the troubling sense of opacity and remoteness that 
has surrounded government record-keeping prac- 
tices in the past. 

Requirement of the Act 

The Office of Management and Budget has issued 
guidelines to Federal agencies on implementation of 
the Privacy Aet*s requirements, These guidelines* 
which are available to interested members of the 
public j* contain a detailed explanation of each of 
the Act ? s agreements. What follow here is only a 
brief summary of its principal features, 

The first thing to be noted about the Act is that 
it applies exclusively to the handling of Federal re- 
cords about individual citizens of the United States 
and aliens lawfully admitted for permanent resi- 
dence, Moreover, it applies only to such records 
when they are maintained by an Executive branch 
agency in a system of records, 

**Executive branch agency*', as defined in the Act, 
mmm any executive department, Government cor- 
poration, Govern f .iciit-controlled corporation or 
other establishment in the executive branch of the 
Federal Government, including the Executive Office 
of the President ov iray i?vf.- ,,nt regulatory 
agency* but specifically exrtadi% y Congressional 
entity (such as the General Accounting Office) or 
any agency of the Judiciary. A "system of records" 
as defined in the Act, means 

a j^oup of any records under the control of any agency 
from which Information is retrieved by the name of the 
individual or by some identifying number, symbol, or 
other identifying particular assigned to the individual. 

Within this scope of application, the Act requires 
each agency to do four basic things from which a 
range of other more specific requirements then flow 
logically: 

* Send 750 to the Suptrlni#ndem of DesumentSp U, S, Oovernmint 
Priming Office, Washington, D.C. 



First, it requires the agency to assure that any personal 
Information it maintains in a system is both germane 
and necessary to the performance of a function the 
agency is required to perform by statute or Executive 
order; 

Second, it requires the agency to publish in the Federal 
Register an annual notice that details such items as the 
name and location of each system the agency maintains, 
the types of records in the system, and the kinds of 
individuals to whom the records pertain, the policies 
and practices of the agency regarding storage f retrlev- 
ability, retention , and disposal of the records, and the 
title and business address of the agency official responsi- 
ble for the system; 

Third, it requires the agency to establish various types 
of procedures — including those that allow an individual 
to review and challenge a record about himself— so that 
when a record in one of the agency's systems Is used to 
make a decision about an individual, it will be as ac- 
curate, complete, timely, and relevant as is necessary to 
assure that the record Itself is not the cause of an unfair 
decision; and 

Fourth, It requires the agency to observe certain mini- 
mum restrictions on disclosure or dissemination inCiud- 
ing keeping an accounting of such. 

Several points should be noted about these re- 
quirements, 

VmU the Act strongly reaffirms the principle that 
agency functions (at least to the extent they are 
supported by systematic record keeping about in- 
dividuals) should ha limited to those clearly autho- 
rized by statute or Executive order, 

Second, the universality uf the requirements to 
Issue an annual public notice on each system ©f 
records an agency maintains cannot be overem- 
phasized. No Federal agency system of records (as 
defined) is exempt. A guiding principle to which 
the tmblic notice provision is directly responsive is 
that in a democratic society no government agency 
should maintain a record-keeping system on indi- 
viduals without at least making the existence of 
the system a matter of public record. 

Third, in the vast majority of cases the steps m 
agency takes to assure the accuracy, relevance, 
timeliness, and completeness of a record about an 
individual shall include procedures that give the 
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Individual an opportunity to confront the record in 
question* With certain exceptions an agency must 
give an individual access to a record that it main- 
tains about him and permit him to challenge its 
content through a process established by die agency 
in accordance with the informal rule-making re- 
quirements (including general notice) of Section 553 
of the Administrative Procedure Act ~— that is, 
notice of rule making and at least 30 days to receive 
and consider comment from interested members of 
the public, 

Fourth, it is important to note that the '-condi- 
tions of disclosure" section does not require an 
agency to make my of the disclosures the section 
authorizes* and in that sense should not be inter- 
preted as contravening any existing, more stringent 
statutory prohibition on the disclosure of personal 
information. It is a set of minimum standards that 
operates in the context of other constraints on 
agency behavior, and one that in several instances 
gives agency heads and program managers the 
option of fashioning their own extremely tight dis- 
closure policies* The "need-to-know" standard with 
respect to internal agency dissemination of a re- 
cord, for example, can be drawn narrowly, and the 
decision whether or not to permit obtain disclosures 
of records, even once they are established as 
"routine" disclosures* is to a large extent a dis- 
cretionary matter for each agency. 

Many other provisions must be considered in as- 
sessing the Act's likely practical effects. One pro- 
vision, for example, narrows the circumstances 
under which an agency may record information 
about an individual^ political and religious beliefs. 

Several provisions stipulate or imply establish- 
ment of administrative and technical safeguards to 
assure that the Act's requirements will be con- 
sistently met, One feature of the Act that needs to 
be understood is the opportunity it provides to 
exempt systems of records from certain of its 
requirements. The Privacy Act places the responsi- 
bility for assuring faithful and effective compliance 
with it* various requirements squarely on agency 
heads and program managers. Under the Act the 



decisions and actions of these officials are sub- 
ject to court review, However, there is no inter- 
departmental review function or appeals board or 
other centralized arrangement for deciding when a 
program function cannot be carried out effectively 
if the record-keeping systems that serve it have to 
meet all of the Privacy Act's requirements. Some 
legitimate investigative activities, for example, 
would be totally frustrated if the individuals being 
investigated had immediate access to all the records 
being kept about them. 

The solution to this dilemma is found in the pro- 
visions wherein an agency may seek an exemption 
from certain specified requirements for certain spe- 
cified types of record-keeping systems through a 
public rule-making process that gives interested 
individuals and groups an nnportunity to express 
their views and, if necessary m engage the agency 
in a public debate on the proposed exemption at 
issue. 

Agency responsibility and acceptability for com- 
pliance with the Act's requirements are also re- 
flected in the approach taken to remedies. Criminal 
penalties are provided for willful concealment of the 
existence of p. * records i-s well as for 

unauthorized personal information. 

But the prr ... .is are the rights of an 

Individual to actions, to bring suits s&d, in 

some Instances, t, -cover damages from an agency 
that fails to treat his record properly. 

Challenges and Opportunities 

One of the most difficult near-term tasks will be 
the achievement of a sufficient degree of coordina- 
tion among the various management functions 
necessarily involved in the implementation of the 
Act, These include (in addition to the wide variety 
of program functions whose information bases are 
the Act's principal concern) the records manage- 
ment policy function itself, the EDP operations and 
planning function, the personnel management and 
training function, budgeting, facilities and services 
procurement* legal counsel, and whatever other 
information policy functions may be directly or 



186 



181 



potentially affected by the unplefn&Tt'tet' r.\ of ih- 
Act — tor example, those cc^cer&aci *\& ih% 
administration of the Freedom oi hdocmzlian Act 
and with the handling of classified itdofmnum. 

Second, because of the eentrality and det*. A. tl 
the annual public notice requirement, and because 
of thv substantial criminal and civil penalties for 
willfully failing to comply with it, agencies have had 
to undertake a full-scale inventory of their personal 
data holdings. For at least some agencies this has 
precipitated a searching review of their need for the 
personal information they maintain, the cost of 
collecting and maintaining it, and the way in which 
their various holdings are distributed, The result 
should be a heightened awareness of the role of 
personal-data record-keeping policies and practices 
in the performance of agency functions. It may also 
lead to some interesting developments in the 
methodology of information policy-makings includ- 
ing some needed work on cost-accounting and 
budgetary implications oi agency record-keeping 
practices. 

Third, it is clear tim* provisions of the Act 
requiring agencies to penult an individual to have 
access to a record about himself will raise some 
practical questions about the organization of record- 
keeping functions, including the cost and control 
consequences of varying degrees of decentralization, 

And fourth, one can probably expect to see a 
certain amount of attention focused over the next 
few years on the incentives that exist or might be 
developed within agencies to assure thrit agency 
officials and employees comply with the spirit as 
well as the letter of the Act. 

On the study and research side, the empirical 
value of thg Act^ various documentation require- 
ments, and most notably of its public notice require- 
ment, are obvious. To the extent that records and 
record-keeping policies and practices reflect the way 
in which government programs actually operate, the 
Privacy Act will produce an unprecedented wealth 
of raw material for the student of government 
organization and management* 



Federal experience under the Act will also be of 
svhsfomia! arid continuing interest to law makers 
:,id &dtm 7 sisl*m?£?s at the State and loral level and 
£q orgsojg&ife^s m private sector. Section 5 of 
the Act establishes a iwo»year a independent. Privacy 
Protection Study Commission to consider whether 
the Congress should entertain similar legislation 
affecting State and local government and the private 
sector. Through its study and review of a wide 
range of public and private records systems, and its 
analysis of their impact on individual liberties, insti- 
tutional relationships, property rights, and stand- 
ards of professional ethics, the Commission will 
make general recommendations and propose 
changes in laws and regulations. Meanwhile, how- 
ever, one can continue to expect considerable atten- 
tion to be paid to the issue in State Legislatures. 

Ideally, a systematic means will gradually be 
developed for appraising the effectiveness of the Act 
both as a protection for individual citizens and as a 
device for improving the quality, organization^ and 
utility of the information that government agencies 
collect and maintain about people. Is it meaningful, 
in practice, to speak of obtaining an individual's 
voluntary assent to the collection and disclosure 
of information about him in a government record? 
Does a policy of allowing individuals to interact 
with records about them lead to improvements in 
the accuracy, timeliness, and relevance of infor= 
mation in the records? Is it possible to make explicit 
and codify the uses that are made of recorded infor- 
mation within an organization or are the patterns 
of circulation and use so various and unstable as 
to defy systematic exposition? 

To what extent can the concepts, requirements, 
and administrative mechanisms in the Federal Pri- 
vacy Act be usefully applied in other non-Federal 
and nongovernmental settings? Cm one find alter- 
native approaches in State government and the 
private sector which look different, but do at least 
as good a job of assuring that records about people 
are handled in ways that adequately protect their 
important right to personal privacy? 
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These are all intriguing and important questions. 
And the Privacy Act of 1974 should help us to 
address them with much greater confidence than has 
heretofore been posbibk. 
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